I work at a small web development and hosting company and an android-using colleague has just had his personal email address used (unverified) to create an Apple ID and sign into various services e.g. iCloud, iMessage and Facetime. Despite the address being unverified, he now has to call Apple to remove the security questions from his account in order to prevent further action from the scammer.
My question is two-fold:
a) If I sign up for an Apple ID with my email (to prevent others using it) will I need an Apple Device to ensure it’s registration and/or will I be iSullied?
b) I have bought a number of domain names over the years, is there any way to prevent scammers from using addresses at my domains to register for an Apple ID?