Title: I have a personal domain with catch-all email enabled. Someone signed up for an Apple ID with a scrambled (random) username on that domain, and I got notified about it on my inbox.<p>This happens every few months and I have usually ignored them because my understanding is that Apple wouldn&#x27;t allow usage of that Apple ID if the email address is not verified. Since this happens every few months, I decided to act on it this time: instead of clicking on &quot;verify now&quot; on the email I received, I worked through the password reset flow and managed to set a new password to the account.<p>However, attempting to delete the Apple ID account prompts for answers to security questions, which I don&#x27;t have because I did not create the account in the first place.<p>There&#x27;s a flow to reset security questions as well, but that prompts for an answer to the existing questions.<p>In chatting with an Apple support member, there&#x27;s apparently a concept of &quot;rescue email&quot; which is different from the Apple ID and can be used to set new security question answers if the old ones are unknown. I don&#x27;t get that option which indicates that the account doesn&#x27;t have a rescue email set.<p>Since all of my available options are fruitless, I asked that the chat support member escalate my case to a higher-up and they offer to arrange of a phone support because supervisors seem to be available only on phone support. That&#x27;s not ideal for me because I am a deaf person and I don&#x27;t sign, and for the reason that I don&#x27;t want my mobile number to be associated with this Apple ID that I didn&#x27;t create.<p>At this point, I am curious to hear if anyone else has ever been in this situation and to understand how you&#x27;ve gotten out of it. I can&#x27;t imagine that this is an isolated case.<p>Disabling catch-all on my domain isn&#x27;t a solution because that&#x27;d just make me unaware of new accounts that are being created on my domain. Shouldn&#x27;t Apple be hard-verifying the email address before allowing any type of usage?
Upvote: