New Phishing Scam Targets iPhone Owners After Device Loss

A new phishing campaign targets iPhone owners after a loss, exploiting distress by impersonating Apple and claiming recovered devices. The attackers aim to steal Apple ID credentials and disable Apple’s Activation Lock, making stolen devices harder to resell. Victims receive fraudulent text messages and iMessages that appear to come from Apple, often including accurate device details such as model name, colour and storage, pulled from the lost iPhone itself.

A link in the message leads to a fake Apple login page that, once credentials are entered, gives attackers full account access, according to NCSC. The method relies on social engineering rather than a technical bypass, since Activation Lock is not exploitable by a flaw.

The guidance emphasises avoiding any communication claiming to report found devices, not clicking unsolicited links, and enabling Lost Mode via Find My if a device is lost, with extra caution about displaying contact details on the lock screen and securing the SIM with a PIN.