If you have recently lost your iPhone and have received text messages claiming Apple has found it, be wary before clicking any links in these text messages. According to the Swiss National Cyber Security Centre (NCSC), a new phishing scam targeting iPhone users via fake Find My alerts that appear genuine may exist and should be avoided.
Scammers use your fear of misplacing or losing an iPhone to their advantage by sending seemingly genuine-looking messages purporting to show it has been found, yet leading you to fake Apple login pages designed to take your credentials and identity.
How the Scam Works
The deception begins after a user marks their iPhone as “lost” via Apple’s Find My feature. This allows the owner to display a custom message and contact details on the lock screen — a feature scammers are now exploiting.
Recommended For You
Fraudsters send text messages pretending to be from Apple’s Find My service. One such message reads:
“We are pleased to inform you that your lost iPhone 14 128GB Midnight has been successfully located. To view its current location, click the link below…”
The message appears genuine - even including accurate phone details likely taken from online listings or public data breaches - yet when you click the link it takes you to a fake Apple website that looks nearly identical.
Entering your Apple ID and password there gives the attackers full control of your iCloud account, including the ability to:
- Disable Activation Lock, Apple’s main anti-theft feature
- Erase your device remotely
- Access your personal data, backups, and payment information
This effectively hands your phone — and identity — to the attackers.
Why It Works
The scam is convincing because it leverages trust in Apple’s ecosystem. The messages use professional language, accurate Apple logos, and sometimes even spoofed sender IDs that appear as “Apple Support” or “Find My iPhone.”
In many cases, users panic and click the link immediately — exactly what the scammers want.
How to Stay Safe
To avoid falling victim to this scam, follow these verified safety measures:
1. Ignore Suspicious Messages
Apple will never contact you via SMS or WhatsApp about a lost device. Any communication will only appear inside the Find My app or your Apple ID email.
2. Use Official Channels Only
Check your lost device’s status directly via the Find My app on another Apple device, or by visiting iCloud.com/find.
3. Never Share Your Apple ID Credentials
Do not enter your Apple ID or password on any link received via text or email. Always type Apple’s website address manually into your browser.
4. Use a Separate Email on Your Lock Screen
Instead of displaying your main Apple ID email, use an alternate contact email or phone number when marking your device as lost.
5. Enable Two-Factor Authentication (2FA)
This adds an extra verification step, preventing scammers from logging in even if they have your password.
6. Add a SIM PIN and Update Security Software
Protect your mobile number from SIM swap attacks and keep your antivirus and VPN updated for phishing protection.
7. Report and Block the Incident
- File a police report immediately.
- Block your device via India’s CEIR portal:ceir.gov.in.
- Report the scam on the National Cyber Crime Reporting Portal: cybercrime.gov.in.\
ALSO READ: YouTube Rolls Out New ‘Ask’ Button Powered by Gemini AI: Watch, Learn, And Interact Smarter
Final Thoughts
Cybercriminals continue to exploit trust and fear -- in this instance targeting people when they lose their phone.
Takeaway: Apple doesn't send texts notifying users when their devices have been found, so any time such a notification comes your way, delete it immediately and check iCloud or Find My app directly for answers.
Being on your guard can save not only your iPhone but your entire digital identity as well.