From: Apple <appleid@id.apple.com>

[Rigo]

Happy and prosperous new year to everyone!!
An enquiry from one of my clients about notification emails he's been receiving from that supposedly Apple service regarding password changes.
Question is whether genuine? The emails do address him to his name correctly.
My familiarity with the Apple ecosystem is quite limited so I can't really answer the question.

 

[GTP]

I wouldnt respond to the link/s in the email.
Personally I would just go to Apple's official site and sign in. Then as a precaution change his password there.

 

[Markverhyden]

All my Apple emails, but no ID reset, come from no_reply@. At any rate I tell people if you aren't expec ting something it's junk, spam, phishing, etc, etc. Get the full header and plug it into mxtoolbox.com and it'll tell you the originating email address and domain.

 

[timeshifter]

Not too long ago I wanted to understand what was in the 10 pages of an email header. I asked ChatGPT to analyze them for me and it worked out pretty well.