Identity theft involving an Apple ID can expose photos, messages, purchases, payment methods, and even access to other accounts tied to your Apple devices.
This guide explains how to report identity theft involving your Apple ID and what to do first so you can limit damage fast.
What Apple ID identity theft looks like
Apple ID identity theft happens when someone gains unauthorized access to your Apple account or uses your personal information to create or take over an account.
Because Apple IDs connect iCloud, App Store, iMessage, FaceTime, Find My, Apple Pay, and device backup data, the impact can spread quickly.
Common warning signs include:
- Unexpected password reset emails or security alerts from Apple
- Sign-ins from unfamiliar devices or locations
- Missing contacts, photos, notes, or files in iCloud
- Purchases or subscriptions you did not authorize
- Locked-out devices after a password change
- Messages sent from your account that you did not write
- Apple Pay cards added or removed without your approval
If the attacker also used personal details such as your name, date of birth, phone number, or government ID, the incident may extend beyond account compromise into broader identity theft.
What to do first if your Apple ID is compromised
Act immediately.
Time matters because attackers can change recovery details, lock you out, or use your account to target contacts.
1. Change your Apple ID password
If you can still sign in, change the password right away using a trusted device.
Choose a strong, unique password you do not use anywhere else.
If you cannot sign in, use Apple’s account recovery process from iforgot.apple.com.
2. Review trusted devices and phone numbers
Check the devices and numbers linked to your Apple ID.
Remove anything you do not recognize.
Also review two-factor authentication settings, since attackers sometimes add their own trusted number to keep access.
3. Sign out of suspicious sessions
Use the Apple ID account page or device settings to sign out of unfamiliar sessions.
If a device appears to be stolen, treat it as a security risk and remove it from your account once you have confirmed your own devices are protected.
4. Secure your email account
Your email account is often the key to Apple account recovery.
Change that password too, enable two-factor authentication, and inspect forwarding rules, recovery emails, and login activity.
5. Contact your bank and card issuers
If Apple Pay, App Store billing, or saved payment methods were exposed, contact your bank or card issuer.
Ask them to freeze or replace cards if there is any sign of fraud.
How to report identity theft involving your Apple ID to Apple
To report identity theft involving your Apple ID, start with Apple Support and document the incident in detail.
Apple can help you regain access, review account changes, and secure connected services.
Use the following approach:
- Visit Apple Support or use the Apple Support app on a trusted device
- Report that your Apple ID was compromised or used without permission
- Ask for help with password resets, account recovery, and device verification
- Request guidance on removing unauthorized devices, payment methods, or recovery numbers
- Save case numbers, chat transcripts, and email confirmations
If the attacker changed your account recovery information, Apple may require account recovery verification before restoring access.
Follow Apple’s instructions carefully and avoid creating multiple recovery requests, which can delay the process.
How to report to law enforcement and government agencies
If your Apple ID compromise is tied to identity theft, file an official report.
These records can help with fraud claims, account disputes, and future recovery steps.
File a police report
Contact your local police department and explain that your identity and Apple account were misused.
Bring proof such as Apple emails, screenshots, suspicious purchase records, and any evidence of unauthorized logins.
Report identity theft to the FTC
In the United States, file a report at IdentityTheft.gov.
The Federal Trade Commission provides a recovery plan and official documentation that can be useful when disputing fraudulent accounts or charges.
Consider state or national cybercrime resources
If you live outside the United States, use your country’s consumer protection or cybercrime reporting portal.
Many regions offer formal identity theft reporting channels and fraud helplines.
What evidence should you collect?
Good documentation makes it easier to prove the incident and resolve secondary damage.
Create a folder with screenshots, emails, and account records.
- Apple security alerts and password reset messages
- Sign-in notifications showing suspicious times or locations
- Device list screenshots from your Apple ID settings
- Purchase history from the App Store or Apple services
- Bank or credit card statements showing unauthorized charges
- Notes about dates, times, and any support case numbers
- Copies of police or FTC reports
Keep records in more than one secure location so you do not lose them if your device is reset or replaced.
How to protect your Apple devices after reporting
Once the report is filed, strengthen your devices so the attacker cannot return through a weak link.
Update software immediately
Install the latest versions of iOS, iPadOS, macOS, and watchOS.
Security updates often patch vulnerabilities that attackers exploit.
Turn on two-factor authentication
Two-factor authentication adds an extra verification step when someone tries to sign in.
Use a trusted phone number you control and review recovery options carefully.
Check iCloud and Find My settings
Make sure Find My is enabled on your devices.
Review shared albums, shared notes, and family sharing settings to confirm nothing was added or changed without permission.
Audit app permissions
Review apps that have access to photos, contacts, location, calendars, and microphones.
Remove permissions that are no longer necessary.
How to monitor for follow-up identity theft
An Apple ID breach can be part of a broader identity theft pattern.
Monitor accounts and reports closely for new fraud.
- Watch credit card, bank, and loan activity for unfamiliar transactions
- Check your credit reports for new accounts or inquiries
- Look for password reset emails from other services
- Review login alerts for email, social media, and cloud storage accounts
- Ask contacts to ignore suspicious messages that appear to come from you
If you suspect your Social Security number, passport number, or driver’s license details were exposed, consider placing a fraud alert or credit freeze with major credit bureaus.
Preventing future Apple ID compromise
Prevention depends on reducing the number of ways an attacker can reset your account or impersonate you.
The most effective habits are simple and consistent.
- Use a unique password for every important account
- Prefer a password manager over reusing passwords
- Keep recovery email and phone numbers current
- Avoid entering Apple ID credentials from email links
- Be cautious with phishing texts claiming your account is locked
- Use security keys if your Apple account supports them and your risk level warrants it
Also verify your trusted devices periodically.
Old phones, shared tablets, and unused laptops should not remain connected to your account indefinitely.
When to escalate beyond Apple Support
Escalate when you cannot recover access, when the attacker is using your identity for financial fraud, or when your account contains material evidence of a crime.
In those cases, coordinate Apple Support, your bank, law enforcement, and the FTC or local equivalent so the incident is documented from multiple angles.
If your Apple ID was used to send scams to your contacts, notify those contacts quickly so they do not click malicious links or share sensitive information.
Prompt communication can reduce the spread of harm and support your identity theft report.