This New iPhone Scam Exploits the Panic of Losing Your Phone

If you’ve ever lost your iPhone, you know the sinking feeling that follows. Now, scammers are exploiting that anxiety with a new phishing campaign that tricks victims into giving up their Apple ID credentials.

The Swiss National Cyber Security Centre (NCSC) has issued a warning about a surge in fraudulent messages claiming that a lost iPhone has been “found abroad.” These messages often arrive weeks or even months after a device goes missing, and they look surprisingly convincing.

Fig 1. The phishing text stating that a lost device has been found. (Source: NCSC)

How the Scam Works

The text or iMessage typically includes accurate details about the missing device—such as its model, color, or storage capacity—making it appear legitimate. The message then invites the owner to click a link to view the device’s supposed location. But instead of taking the user to Apple’s official Find My service, the link leads to a fake website that mimics Apple’s login page.

Once victims enter their Apple ID and password, scammers gain access to their accounts. This allows them to disable the iPhone’s Activation Lock, a security feature designed to prevent anyone else from erasing or using a lost or stolen device. With the lock removed, thieves can freely resell the phone.

Fig 2. The fake Apple ID login page. (Source: NCSC)

How Scammers Get Your Information

Experts say attackers often obtain the victim’s contact details from the SIM card inside the stolen phone—if it wasn’t protected by a PIN—or from the message the owner displays on the lock screen using Apple’s Find My app. That message, meant to help honest finders return a device, can unintentionally give scammers exactly what they need.

What makes this scam particularly dangerous is its emotional hook. When people lose a phone, they naturally hope for good news. Receiving a message that it’s been found feels reassuring, but that’s precisely what the criminals count on.

How to Protect Yourself

The NCSC emphasizes that Apple never contacts users via text or email to report a found device. The only legitimate way to locate your missing iPhone is through the Find My app or iCloud.com/find.

If your iPhone is lost, immediately enable Lost Mode through Find My. This locks your device, suspends Apple Pay, and keeps Activation Lock active.

If you include contact details on your lock screen, use a different email address to the one associated with your Apple ID. This means if you receive a message to this email claiming to be from Apple, you know it’s probably a scam. Additionally, always set a PIN for your SIM card to prevent misuse of your phone number.

Finally, never click links in unsolicited messages or enter your Apple ID credentials on any site other than Apple’s official platforms. A few moments of caution can prevent a much larger headache later.

Staying alert to scams like this can help you keep your digital life—and your peace of mind—secure.