Image: GroundPicture/Envato
Switzerland’s NCSC warns iPhone users of a new scam exploiting lost devices to steal Apple ID credentials through fake Find My messages.
New warning for iPhone owners: Switzerland’s National Cyber Security Centre (NCSC) says thieves are now hijacking Apple ID credentials from stolen devices — and they’re doing it through search results.
The scam plays on panic. You lose your iPhone. You rush to track it down. That’s when criminals strike.
Using the Find My feature, iPhone owners can send a custom lock-screen message with contact info. Scammers exploit this by sending fake emails or texts that look like they’re from Apple Support — complete with links claiming to show your phone’s location.
The exploit is simple on its face and relies on that initial panic after losing the phone. iPhone owners can send custom messages through the Find My app to appear on the lock screen, including an email address or phone number. The scammers will then send a phishing email or SMS, disguised as a message from Apple’s Find My support team, with a link that claims to show the device’s current location.
“Losing your iPhone is always annoying. Not only is the device gone, but your personal data may also be lost,” said the NCSC in a blog post. “Once the initial panic has passed, most people are left hoping that someone honest will find it. But if scammers have your phone, they may try to exploit this hope.”
As scammers have access to the device, they can provide accurate details about it, such as the model, color, and storage size, to make the message seem more convincing. If the SIM hasn’t been deactivated and doesn’t have PIN protection, scammers can also pull the phone number from it, allowing them to send an SMS rather than an email.
The link will redirect users to a fake Find My website that displays a login prompt. Once the username and password have been sent, the scammers have everything they need to deactivate the Activation Lock, allowing them to unlock the device and sell it.
Before selling it, scammers may be able to infiltrate the user’s network by accessing any financial apps connected to the iPhone. This could soon become even more worrying, with Apple preparing to add digital passports and other identification to the iPhone.
While this scam primarily targets iPhones, Android users can also display messages on their lock screen. However, Google says its AI security system blocks 58% more scams than Apple’s, suggesting Android users may be less exposed.
The NCSC recommends ignoring any messages that appear to come from Apple, as they will not contact you via text or email about a device being found. It also recommends setting Lost Mode as soon as possible via iCloud, as this will make it virtually impossible to unlock.
It also recommends being careful about which details to share on the lock screen and suggests setting up a dedicated email address to find the iPhone, so that no other data is stolen.
The Activation Lock is the only thing preventing a scammer from wiping an iPhone and selling it. Still, even with the lock active, many victims have seen their devices shipped to China and other parts of Asia before being taken offline.
Several police agencies have called on Apple and other manufacturers to do more to prevent this by permanently bricking stolen devices and tagging them to avoid resale. Apple has not been sympathetic to the UK government and others calling for control and access to their devices.
According to the Met Police, phone snatchers specifically target Apple devices because of their potential for profit overseas. In China specifically, a high-end iPhone that is not blocked by the Chinese firewall can sell for upwards of $1,500.
Related reading: A recent Google study found that Android devices are now outperforming Apple’s smartphones in protecting users from mobile scams.
David Curry is a tech journalist and analyst with over a decade of experience writing for established outlets. He holds a master’s degree in International Journalism from the University of Leeds and has covered the technology sector since the early 2010s. His work focuses on B2B technology, data journalism, mobile apps and app markets, artificial intelligence, digital platforms, and emerging technologies. He earned a BA from the University of Lincoln and an MA from the University of Leeds.
