I’m just speculating but maybe they (scammers) filled out a fraudulent activity form on the Apple site on behalf of the victim and then called before an Apple rep did.

[–] [email protected] 2 points 1 day ago (1 children)

Wouldn't they still need to know the username and telephone number then? That seems like something most people would be unable to link.

[–] [email protected] 2 points 1 day ago* (last edited 19 hours ago)

Again I am going in to the realm of conjecture here over a little post, but maybe they had loads of information on Apple users from a data breach and this is how they were capitalising on them.

[–] [email protected] 2 points 1 day ago

Yeah that's how I think they did it.