Canadian smartphone users are being targeted by an increasingly sophisticated scam that preys on people who have lost their iPhones. According to a November alert from the Swiss National Cyber Security Centre, fraudsters are sending convincing text messages claiming to have found missing Apple devices.
How the iPhone Recovery Scam Works
The scam begins when you receive an unexpected text message or iMessage that appears to come from an Apple representative. The message claims your lost iPhone has been located in another country, sometimes weeks or months after the device went missing. What makes this scam particularly convincing is that the messages include accurate details about your specific device.
The scammers include precise information about your phone's model, colour, and storage capacity, which they can access directly from the device itself, according to the NCSC warning. The message then directs you to click a link to see your phone's location and recover it.
The Dangerous Fake Apple Login Page
When victims click the provided link, they're taken to a website that looks identical to Apple's official login page. This fake website is designed to steal your Apple ID credentials, giving scammers complete access to your device and personal information.
The message contains a link that supposedly shows the device's location, but it actually leads to a fake website designed to look like Apple's official login page, the NCSC states in its alert. Once scammers obtain your login information, they can unlock your phone and access all your personal data.
Why This Scam Is So Effective
This scheme works because it exploits the emotional distress people experience when they lose their phones. The panic and urgency of the situation can cloud judgment, making victims more likely to fall for the scam.
You go into panic if you've lost your phone...You're not necessarily thinking cognitively, explained Amy Nofziger, director of victim support for the AARP Fraud Watch Network. You're thinking, everything in my life is on that device. I need to get it back at all costs.
How to Protect Yourself From Phone Scams
Security experts emphasize that Apple would never send unsolicited text messages about lost devices. The company explicitly states on its website: Never share personal data or security information like passwords or security codes, and never agree to enter them into a webpage that someone directs you to.
Nofziger offers straightforward advice: Do not give any of your personal information out to a link that came to you unsolicited. My best advice is to not try to discern if it's Apple or not reaching out to you. Just go directly to Apple.
What to Do When You Lose Your Phone
Instead of responding to suspicious messages, take immediate action using your phone's built-in security features:
Enable Lost Mode immediately through the Find My app on another device or by visiting iCloud.com/find. This locks your device, suspends payment cards, and displays a custom message with contact information.
Change your Apple Account password if you believe your phone has been compromised. This prevents scammers from accessing your personal information.
Activate two-factor authentication on all your devices, which requires additional verification beyond your password to access your accounts.
If you receive a suspicious message claiming to be from Apple, take a screenshot and email it to reportphishing@apple.com. For Android users, you can block suspicious messages or mark them as spam using your phone's messaging options.
Losing your phone is stressful enough without falling victim to scammers. By staying vigilant and using official channels to locate your device, you can protect your personal information and avoid additional headaches.
