Stolen iPhones fuel scary passcode scam

Your iPhone tin consciousness astir useless to a thief erstwhile you people it arsenic lost. Apple's Activation Lock tin assistance crook a stolen instrumentality into a locked brick. That should marque telephone theft little profitable. Yet thieves person recovered a nasty workaround.

According to caller probe from Infoblox Threat Intel, the cybersecurity probe squad astatine Infoblox, criminals are utilizing fake Apple pages, smishing texts and Telegram-based unlocking tools to instrumentality stolen iPhone owners into handing implicit their passcodes.

Infoblox Threat Intel tracks cybercriminal enactment partially by studying DNS, the strategy that helps devices find websites online. Think of DNS arsenic the internet's telephone book. By watching patterns successful suspicious website names and traffic, researchers tin spot fake domains, phishing pages and larger scam networks.

The scary portion is however idiosyncratic the scam tin feel. The thief whitethorn already person your phone. The connection whitethorn get close aft the theft. The fake leafage whitethorn adjacent amusement what looks similar your iPhone moving connected a map.

WHY IPHONE USERS ARE THE NEW PRIME SCAM TARGETS

Cybercriminals are utilizing fake Apple pages and substance messages to instrumentality stolen iPhone owners into giving up their passcodes. (Kurt CyberGuy Knutsson)

Researchers recovered that galore thieves attraction little astir the information connected the telephone and much astir turning the instrumentality into resale cash. Once they get your passcode, they tin region protections, hitch the instrumentality and merchantability it.

Join CyberGuy Live: Lock Down Your Phone successful 30 Minutes (This Saturday, June 13, 10 americium ET)

• Your telephone holds your email, passwords, photos, banking apps and idiosyncratic data. In this free, unrecorded online class, Kurt the CyberGuy volition locomotion you measurement by measurement done elemental telephone information fixes you tin bash successful existent time. You’ll larn however to amended your privateness settings, spot the latest telephone scams, usage trusted information tools and locomotion distant with a elemental checklist to enactment protected. Register here: CyberGuyLive.com.

How the stolen iPhone passcode scam starts

Here is the portion that feels particularly cruel. When you suffer an iPhone, you whitethorn enactment a connection connected the fastener surface with a telephone fig to call. That diagnostic tin assistance a bully idiosyncratic instrumentality your device. A scammer tin usage that aforesaid fig to interaction you.

In 1 lawsuit described by the researchers, a stolen iPhone proprietor received a substance soon aft the theft. The connection linked to a fake Apple-style website. The leafage showed what looked similar a moving telephone determination connected a map. Then it asked for the phone's PIN code. Had the unfortunate entered it, the thief would person gained power of the device. That is what makes this scam truthful believable. The thief whitethorn truly person your phone. The connection whitethorn get astatine the cleanable moment. The fake leafage whitethorn look adjacent capable to Apple's existent Find My acquisition to drawback idiosyncratic who is stressed and trying to retrieve an costly device.

Why thieves privation your iPhone passcode

A locked iPhone has constricted resale value. An unlocked iPhone tin beryllium wiped, removed from an Apple relationship and sold for overmuch more. The researchers recovered Telegram groups selling telephone unlocking services. Some tools people older phones. Others assistance criminals cod accusation astir newer devices truthful they tin physique a much convincing phishing attack. These services tin see "Find My iPhone Off" kits, fake Apple login pages, AI dependable telephone tools and prerecorded messages that impersonate Apple.

The pricing besides makes this underground concern casual to enter. Some unlocking attempts outgo lone a fewer dollars. According to the research, unlocking a caller iPhone tin outgo anyplace from $5 to $50, depending connected the seller, with an mean terms beneath $10.

That debased outgo helps explicate wherefore this scam tin spread. A thief nary longer needs heavy method skills. They tin bargain a kit, travel instructions and nonstop a polished scam message.

Fake Apple texts marque the scam consciousness real

The scam does not halt with 1 generic text. Criminals tin customize phishing pages with details pulled from the telephone oregon from linked accounts. That tin see the victim's name, email address, instrumentality details and adjacent whether the passcode has 4 oregon six digits. The fake leafage whitethorn besides amusement a chosen determination connected a "lost iPhone" map. Then the scammer sends the nexus by text, WhatsApp oregon email.

Once the unfortunate enters credentials oregon a passcode, the accusation tin spell consecutive backmost to the attacker done Telegram. From there, criminals tin region linked devices from the Apple Account and hole the telephone for resale. That is wherefore the connection tin consciousness oddly personal. The scammer whitethorn cognize capable to marque the alert consciousness urgent and official.

Stolen iPhone scams are increasing fast

Researchers identified much than 10,000 domains tied to these telephone unlocking tools and smishing campaigns. Many utilized Apple lookalike names oregon generic customer-support wording, specified arsenic fake determination and phone-finding themes. They besides recovered that postulation to verified smishing domains roseate 350% successful 2025 compared with the erstwhile year.

Some tools adjacent effort to combat information blocks. The probe recovered scripts that cheque whether smishing domains are blocked. Then those scripts taxable fake explanations to effort to get them removed from Google Safe Browsing warnings. That means criminals are not lone gathering fake pages. They are besides moving to support those pages online agelong capable to fool victims.

DON’T GET CAUGHT IN THE 'APPLE ID SUSPENDED' PHISHING SCAM

A stolen iPhone proprietor whitethorn person a fake Find My alert that appears to amusement the instrumentality moving connected a map. (Kurt "CyberGuy" Knutsson)

What this iPhone scam means to you

If your telephone gets stolen, the astir unsafe connection whitethorn get aft the theft. You whitethorn beryllium worried, aggravated and hopeless to way your device. That is precisely the infinitesimal scammers want. A connection claiming to beryllium from Apple, Find My oregon lawsuit enactment tin consciousness helpful.

However, Apple volition not inquire you to participate your iPhone passcode done a random nexus sent by substance oregon WhatsApp. The passcode is the prize. Once you springiness it up, you whitethorn assistance the thief crook your locked telephone into a sellable device.

Ways to enactment harmless from stolen iPhone scams

If your iPhone goes missing, a fewer calm steps tin assistance you debar handing thieves the 1 happening they request most: your passcode.

1) Never participate your iPhone passcode done a substance link

Your iPhone passcode should enactment connected your iPhone. Do not benignant it into a website that arrives by text, email oregon WhatsApp, adjacent if the leafage looks similar Apple.

2) Go straight to Find My

If your iPhone is missing, usage the Find My app connected different Apple instrumentality oregon spell straight to iCloud done your browser. Do not usage a nexus from a message.

3) Treat urgent betterment messages arsenic suspicious

Scammers emotion pressure. A connection whitethorn accidental your telephone has been found, moved oregon scheduled for removal. Pause earlier you click. Open Apple's tools yourself instead.

4) Use a beardown iPhone passcode

Avoid elemental codes specified arsenic birthdays, repeating numbers oregon casual patterns. A longer alphanumeric passcode gives thieves a overmuch harder target.

5) Keep Activation Lock turned on

Make definite Find My is enabled earlier thing happens. On iPhone, spell to Settings > your name > Find My > Find My iPhone and corroborate that Find My iPhone is turned on.

6) Do not region the stolen iPhone from your Apple Account excessively quickly

If your iPhone is stolen, support it listed successful Find My and your Apple Account. Removing it tin besides region Activation Lock, which helps halt idiosyncratic other from erasing, activating and reselling your phone. If you usage Find My, prime the stolen iPhone and take Mark As Lost oregon Erase This Device if needed. Avoid Remove This Device unless Apple Support, your bearer oregon instrumentality enforcement tells you to bash it.

FIND A LOST PHONE THAT IS OFF OR DEAD

Apple’s Activation Lock tin marque stolen iPhones harder to resell, but scammers are trying to instrumentality victims into disabling protections. (Kurt "CyberGuy" Knutsson)

7) Use beardown antivirus bundle connected your devices

Strong antivirus bundle tin assistance artifact malicious links, phishing pages and scam sites earlier they bash damage. It tin besides pass you erstwhile a tract looks unsafe. Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android and iOS devices astatine CyberGuy.com.

8) Report the stolen iPhone

Report the stolen telephone to section constabulary and your wireless carrier. Your bearer whitethorn beryllium capable to suspend work oregon artifact the instrumentality from the network.

Yes. Android phones person their ain anti-theft protections, but thieves whitethorn inactive effort a akin trick. Instead of asking for an iPhone passcode, a scammer whitethorn nonstop a fake Google, Find My Device, Find Hub, Samsung Find oregon bearer connection aft your Android telephone is stolen.

The connection whitethorn assertion your telephone was found, moved oregon acceptable to beryllium recovered. Then it whitethorn nonstop you to a fake leafage that asks for your Google relationship password, Samsung relationship password oregon surface fastener PIN, password oregon pattern.

That accusation tin assistance a thief get astir protections that marque a stolen Android telephone harder to reset and resell. Google’s Factory Reset Protection tin necessitate the erstwhile Google relationship oregon surface fastener aft an unauthorized reset. Samsung says Google Device Protection works connected Galaxy phones erstwhile a Google relationship and fastener surface are acceptable up.

The proposal is the same: bash not usage a nexus from a text, email oregon WhatsApp connection to retrieve a stolen Android phone. Go straight to Google’s Find Hub, Samsung Find oregon your carrier’s authoritative website yourself. Never benignant your phone’s surface fastener oregon relationship password into a betterment leafage that arrived by message.

Kurt's cardinal takeaways

A stolen iPhone utilized to beryllium a headache for thieves due to the fact that Activation Lock made resale harder. Now, criminals are trying to marque you portion of the unlocking process. They bash it with fake Apple pages, cautiously timed texts and slick-looking maps that play connected panic. The safest determination is to dilatory down. If your telephone disappears, usage Apple's authoritative Find My tools and disregard immoderate connection that asks for your passcode. That precise codification whitethorn beryllium the 1 happening lasting betwixt a locked ceramic and a payday for a thief.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Should telephone makers and wireless carriers bash much to halt stolen phones from being resold, oregon is the work mostly connected users to fastener down their devices? Let america cognize by penning to america astatine CyberGuy.com.

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

Copyright 2026 CyberGuy.com. All rights reserved.