Lost iPhone Found Text Scam: Check Before You Sign In

Your iPhone is missing. A text arrives claiming it was found and asking you to confirm your Apple Account before you can see its location. The message may know the model or show a familiar logo. Neither detail proves it came from Apple. Apple says it will never contact you to announce that your stolen iPhone or iPad was found.

Do not open the sign-in page from that text. Use a separate device you trust and open Find My yourself. This guide explains the difference between checking a device and handing an account to a stranger. It also covers what to do if you have already entered a password. If you are still working through the original loss, begin with the iPhone finding guide.

Check the phone without following the message

Open the Find My app on another Apple device signed in to your account. If you have no such device, type icloud.com/find into the browser yourself. Do not search for a login page through a text link or copy the address from a stranger’s message. Select your missing iPhone in Devices and review its status there.

If you believe it was stolen, mark it as lost and contact your carrier about the line. Apple also recommends reporting theft to local police. Keep the iPhone in Find My even if you decide to erase it remotely. Apple’s current stolen-device instructions say removing the device from Find My removes Activation Lock, making it easier to erase and resell. Apple’s guidance also says supported devices can still be located after a remote erase, so the old blanket claim that erasing always ends location tracking is wrong.

Do not chase a location on the map yourself. A dot can be old or approximate, and a confrontation can be unsafe. Give any relevant information to the authorities rather than treating a map as permission to recover the device personally.

Recognize the request behind the message

The most important signal is what the sender asks you to do. A fake found-device message often pushes you to sign in, provide a verification code, enter a device passcode or remove the phone from Find My. Those actions serve the sender, not the owner. A screenshot of the alleged location or an Apple-looking page is not independent confirmation.

Sender names can be imitated. A message that displays “Apple” is not automatically genuine, and a full phone number is not automatically fake. Links can also disguise their destination behind a button or a familiar phrase. Apple’s support.apple.com/en-us/102568 explains social engineering and how to report suspicious messages. Use that official advice rather than trying to memorize a list of suspicious punctuation marks.

Opening a link is not the same as surrendering the account. The biggest immediate risk is entering credentials or codes on the page, approving an unexpected sign-in prompt, or following instructions that disable a security feature. If you tapped the link but entered nothing, close it and verify the device in Find My. If you downloaded a file or approved a prompt, mention that when seeking support.

If you entered your password or a code

Move to a trusted device. Open Settings on an Apple device or type appleid.apple.com yourself. Change your Apple Account password, then review the account’s devices, phone numbers and other security details. Apple’s compromised-account guidance gives the current recovery steps. If your password no longer works, follow Apple’s account recovery flow; do not use a recovery link supplied by the text sender.

Review unfamiliar devices in the account list and remove only devices you do not recognize. Be careful here: removing an unfamiliar signed-in device from an account is different from removing your stolen iPhone from Find My. Apple explicitly warns against doing the latter while it is stolen. If you cannot tell which control you are looking at, contact support.apple.com before changing it.

Tell your mobile carrier that the phone is stolen and ask it to secure the line. If a code was sent to that line or you notice unfamiliar account changes, say so. A carrier may also ask for the phone’s IMEI; our IMEI guide explains where to find it without the phone. Change other passwords only where you have evidence they were exposed or reused. Do not assume that entering an Apple Account password instantly exposes every saved password or automatically removes Activation Lock.

Keep Activation Lock in place

Activation Lock is linked to Find My. Its purpose is to make a lost or stolen device harder to reactivate without the owner’s account. A thief may therefore pressure the owner to remove a device voluntarily. The sender might claim that removing it is needed to view a new location, receive a refund or complete a police report. Apple’s stolen-device guidance says the opposite: do not remove a stolen iPhone from Find My.

Remote erase is a separate decision. If you believe the phone will not be recovered and its data needs protection, Apple provides an erase option in Find My. Review Apple’s current instructions and any insurance requirements before using it. Erase does not mean you should remove the device from Find My afterward. The older Apple page support.apple.com/en-us/108794 is another official reference, but follow the current stolen-device page for the latest sequence.

No ordinary public website can remove Activation Lock just because it knows an IMEI. The risk in these scams is social engineering: convincing the account owner to grant access or to switch off protection. For the difference between a device identifier and a live position, read our IMEI versus GPS guide.

Report the message and keep evidence

Apple asks users to take a screenshot of a suspicious SMS that appears to be from Apple and email it to reportphishing@apple.com. Keep the message, sender details and time in case you make a police or carrier report. Do not reply to the sender or send them an image of your account screen. If someone threatens you, contact local police directly.

Reporting routes depend on where you live. In the United States, ic3.gov accepts internet crime reports and reportfraud.ftc.gov accepts consumer fraud reports. In the UK, the NCSC UK publishes national guidance. Brazil has a separate phone-theft response portal at celularseguro.mj.gov.br. These are regional options, not steps every reader must complete.

If you need to contact Apple, use its website to find the appropriate local route. A saved number such as 1-800-275-2273 may be useful in the United States, but published support numbers can change. The same applies to carrier lines such as 1-800-937-8997, 1-800-922-0204 and 1-800-331-0500. Verify a number on the provider’s own site before calling.

The useful rule to remember

A text saying “we found your iPhone” gives you no more authority than any other unsolicited message. Open Find My independently, keep the device protected, and change account credentials through Apple’s own controls if you shared them. The link in the text is never necessary to check whether your iPhone has reported a location.

For background on the wider problem, the APWG tracks phishing activity and a Trustonic investigation describes one stolen-phone supply chain. Neither source can establish who sent a particular message to you. Apple’s official stolen-device and phishing guidance above is the basis for the steps in this article.