1

Hi everyone!

If you’re not aware Apple has a feature called hide my email, this allows you to make a fake email which you can send and receive from, but then easily create and delete.

Personally, I have used this for a ton of sites to prevent spam, but I just realised this is a major tool for spammers, in seconds they can make emails to sign up to services and easily create many alternate accounts to abuse with.

In addition to this it’s almost impossible to distinguish a legitimate Apple account to a hide my email account.

At the moment we’re considering blocking the iCloud domain, but this would be very unfortunate for those with genuine iCloud accounts, what do you think we should do?

1 Like
2

You’re indeed correct.

Although the hidden email feature on iCloud can be used for good intentions, scammers can easily abuse it as it’s technically available to anybody who has payed for the subscription.

However, the same case goes for other hidden email tools, such as Firefox Relay (I made a post on it before), and several other sites.

Personally, I don’t think it’s worth blocking the iCloud domain, as it’s unlikely scammers will chose to use it in the first place because it’s a payed feature, compared to free email hiding tools on the internet. Apple has also invested a lot into the security of iCloud, which makes it even less likely for scammers to consider iClould email address hiding as their first choices.

3

I agree with this. There’s no real point to blocking iCloud as most spammers wouldn’t really want to go as far as to pay for iCloud+ to attack a small(ish) site.

1 Like
4

You would be surprised on how common this is.

It has caused lots of destruction to the forums which is why were considering blocking it

5

It has been used before which is why we’re considering blocking it,

1 Like
7

But if you block iCloud, there’s still 10minutemail which has around 500 domains.

8

Yeah but those can be blocked as they use similar subdomains

1 Like
9

In addition to that is there are genuine iCloud domains, we’ll see what we do, but it isn’t looking good for the icloud domain.

1 Like
10

I see. If that’s the case I would say blocking the iCloud domain would be a good move, maybe you can create a poll to get opinions from the community too.

11

Do you think we should block the icloud domain?

  • Yes
  • No

0 voters

12
should we make a petition for apple to limit this feature to users (to prevent spam)?
  • Yes
  • Unsure
  • No

0 voters

14

It’s a 50 - 50 vote, hard to tell.

1 Like