iPhone owners who've lost their devices are being targeted by a cunning phishing campaign that exploits their hope of recovery, according to a warning issued by Switzerland's National Cyber Security Centre (NCSC).
The scam involves fraudulent text messages claiming that a missing iPhone has been located abroad, complete with accurate device details such as model, colour, and storage capacity—information that thieves can read directly from the locked screen. These messages appear to originate from Apple's Find My service and include links that are supposedly used to display the device's location.
How the Attack Works
The fake messages prey on a vulnerability in Apple's own security feature. When users activate Lost Mode through Find My, they can display contact information on the lock screen to help honest finders return the device. Scammers weaponise this feature by obtaining the displayed phone numbers or emails and crafting targeted phishing messages.
"Losing your iPhone is always annoying. Not only is the device gone, but your personal data may also be lost," the NCSC stated. "But if scammers have your phone, they may try to exploit this hope."
The phishing links lead to convincing fake websites mimicking Apple's official login page. When victims enter their Apple ID credentials, scammers gain immediate access to their accounts. Their ultimate goal is to bypass Activation Lock, Apple's built-in security feature that prevents stolen iPhones from being erased or resold without the owner's credentials.
Staying Protected
Security experts emphasise that Apple never contacts users via text or email about found devices. The NCSC recommends several protective measures:
- Ignore unsolicited "device found" messages and never click embedded links
- Enable Lost Mode immediately through the official Find My app or iCloud.com/find
- Use a dedicated email address instead of your primary phone number on the lock screen
- Protect your SIM card with a PIN to prevent unauthorised number access
- Never remove your device from your Apple account, as this disables Activation Lock
This scam highlights how cybercriminals increasingly exploit emotional vulnerabilities—turning the relief of potentially recovering a lost device into a gateway for identity theft.