My usual Gmail username, which I registered for on the first day of Gmail, has a period in it.

Someone has registered for an Apple ID using that Gmail username without any periods. So Apple, knowing that Gmail ignores periods, won't let me set up an Apple ID using my Gmail address.

However, I can change the password for that existing Apple ID - since the password reset emails go to my Gmail, as they should - but I cannot log in because I do not know that user's security questions.

In a nutshell, I'm trying to figure out how someone was able to set up an Apple ID using my Gmail address, even though I have always owned that Gmail address. And I'm trying to figure out how I can reclaim that Apple ID and/or prevent that individual from using an Apple ID with my Gmail username.

Sounds similar to a phishing scam honestly.

Scammer sets up account and uses bad credit card info, website sends email to real.person Gmail asking them to update billing info, and once updated scammer has access to billing info.

https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user/

Never had the issue pop up in this exact scenario but I know with some other websites, sometimes if I get an email it doesn't require me to input a password before getting into a place where info can be input.

As far as I am aware Gmail has never accounted for dots so not sure how the account was originally setup since it would normally require email verification in Keegan's scenario.

Fenrir said:

---

Sounds similar to a phishing scam honestly.

Scammer sets up account and uses bad credit card info, website sends email to real.person Gmail asking them to update billing info, and once updated scammer has access to billing info.

https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user/

---

Ordinarily I would think that, except Apple's registration seems aware of the dot. The existing ID is dotless, and Apple won't let me register my dotted version as a result.

I did go through my Gmail and found, several years ago, that "Darleen Keegan" invited the dotless form of my Gmail username to her "Family Sharing" - because I received the invitation.

(I'm not related to anyone named "Darleen". I don't even know anyone named "Darleen".)

Perhaps "Family Sharing" is a loophole that allows someone to register or otherwise reserve an Apple ID without confirming an email address?

Call Apple. Tell them you forgot the security question or that your account was hacked. They will likely send you a recall email to your Gmail, and when you confirm, profit.

Or go to a genius bar and do the same.

Dealing with customer service people is a pain, but sometimes best solution.

Oh, that's the fun part!

I can send a password reset email to my Gmail address and change the password for the Apple ID just fine. I should be good, right?

[Lee Corso Not So Fast dot GIF]

But then when I log in with the new password, I get hit with the security questions - questions for which I do not know the answer!

Looking forward to seeing what photos are in Darleen's iCloud.

Many will swear its user error, but i really don't think Gmail handled periods 100% correctly back when it debuted.

Quote:

---

The universal failure revolving around email in general is websites/companies allowing registration of email addresses without verification.

---

That definitely seems to be the root cause here.

I'm just shocked that Apple had (has?) this issue. Perhaps the "Family Sharing" was a loophole that permitted it.

Keegan99 said:

---

Oh, that's the fun part!

I can send a password reset email to my Gmail address and change the password for the Apple ID just fine. I should be good, right?

[Lee Corso Not So Fast dot GIF]

But then when I log in with the new password, I get hit with the security questions - questions for which I do not know the answer!

---

Right.

But, if you get on the phone with an Apple person, they can reset the security question.

I have a call in with Apple. They are confused as to how this happened, and have escalated the issue, as the frontline support cannot delete an Apple ID or transfer ownership. I'm supposed to get a call back tomorrow, where they should be able to turn the Apple ID over to me.

Keegan99 said:

---

I have a call in with Apple. They are confused as to how this happened, and have escalated the issue, as the frontline support cannot delete an Apple ID or transfer ownership. I'm supposed to get a call back tomorrow, where they should be able to turn the Apple ID over to me.

---

Great.

Keep us updated. I'm interested to see how this plays out.

Quote:

---

I don't think so. I had to create Apple IDs and verify them for my kids. Unless there was another way around it farther back but they have been set up for 5 or so years now.

---

What I'm thinking is that the Apple ID is sitting in a limbo state, where it has been claimed but is also unverified and inactive.

That somehow Darleen was able to call immortal dibs on it by entering it into her "Family Sharing" plan.

Apple tells me that the Apple ID using my Gmail was unverified. (Obviously.)

Apple also tells me that the Apple ID using my Gmail address has been deleted. (Great!)

Apple also tells me that I have to wait 30 days to use my Gmail address for an Apple ID (Uh... WTF?!)


The latter point is a major problem. A malicious actor could attempt to register email addresses for Apple IDs, knowing the email address will never be confirmed, and that when the victim tries to create an Apple ID and Apple support figures it out, the victim will still have to wait a month to claim their Apple ID. I'm sure there is some legal or business reasoning for the 30 day policy, but it is obvious that whoever created the policy did not contemplate this scenario.

Unfortunately not. Apple is wise to Gmail ignoring dots in usernames.

Hence why someone attempting to register firstnamelastname@gmail.com blocked me from registering firstname.lastname@gmail.com (which started this whole fiasco).

Apple is stubbornly sticking to insisting on the 30 day wait.

Technical issues I can understand. But this is just some mindless corporate policy which carries with it no ability to actually speak with someone that can fix the problem.