That “We Found Your Lost iPhone” Text Is a Phishing Trap (Late 2025)
Losing an iPhone is stressful—and scammers know it. A common late-2025 pattern: you receive a text/iMessage saying your iPhone was found (often “found abroad”), and you’re told to tap a link to view the device’s location. The page looks like Apple, but it’s a credential-harvesting site.
This article is for anyone who:
- Lost or had an iPhone stolen recently
- Turned on Find My and Lost Mode
- Put a phone number or email address on the lock screen
- Got a “found your iPhone” message that includes convincing device details
What’s happening (and why it works)
According to Switzerland’s National Cyber Security Centre (NCSC), scammers send messages that look like Apple and include accurate details (model/color/storage) that can be read from the device itself. The link in the message leads to a fake Apple login page. If you enter your Apple ID and password there, the attacker can take over your Apple Account. (ncsc.admin.ch)
The end goal is usually removing Activation Lock. Activation Lock ties the iPhone to your Apple Account, making it hard to resell if you keep the device associated with your account. Since bypassing Activation Lock isn’t realistically available to criminals, phishing the owner is one of the only practical paths. (ncsc.admin.ch)
Apple’s own guidance reinforces a key rule: Apple will not contact you to say your iPhone has been found and you should never share passcodes, passwords, or verification codes. (support.apple.com)
First: how to verify whether the message is real
1) Do not tap the link
Even “just checking” can lead to a look-alike sign-in page.2) Check your device location only via trusted paths
Use one of these official methods instead:- Open the Find My app on another Apple device
- Or go directly to iCloud Find Devices (type the address yourself in a browser; don’t follow message links)
Apple documents how to locate, mark as lost, and erase a device via Find My / iCloud Find. (support.apple.com)
3) Treat “device found” messages as suspicious by default
Especially if the message:- Pressures you to act fast
- Uses a shortened link
- Asks you to “sign in to view the location”
- Includes odd spelling/formatting (though many scams are polished)
What to do immediately if you get the scam text
Step A — Put (or keep) the iPhone in Lost Mode
In Find My, select the device and enable Lost Mode / Mark As Lost so it stays locked and shows your message. (support.apple.com)Tip: If you haven’t marked it as lost yet, do that first—fast action matters.
Step B — Don’t remove the device from Find My / your Apple Account
Apple warns that removing the device can remove Activation Lock, making it easier to use or resell. (support.apple.com)Step C — Tighten your Apple Account security (from a safe device)
Do this from a computer or another trusted device (not from a link in a text):1. Change your Apple Account password.
2. Review trusted devices/phone numbers and remove anything you don’t recognize.
3. Make sure two-factor authentication is enabled.
If you have Stolen Device Protection enabled, note that some sensitive changes may require biometric authentication and an hour-long security delay when you’re away from familiar locations. Apple describes this “Security Delay” behavior. (support.apple.com)
Step D — Protect your mobile number
If your phone was stolen, contact your carrier to:- Report the theft
- Suspend service / block the SIM if needed
(Why: attackers sometimes use the SIM/number to target you or attempt account recovery.)
If you already clicked the link (or entered your Apple ID)
Don’t panic—just move quickly.
1. Immediately change your Apple Account password from a known-good device.
2. Check for account changes you didn’t make (new trusted numbers/devices, forwarding emails, etc.).
3. Keep the iPhone in Lost Mode and do not remove it from Find My.
4. If you suspect broader compromise, report the incident and preserve evidence (screenshots of the message, the domain, timestamps).
Reporting (U.S.)
The FBI recommends reporting phishing/smishing to IC3 (Internet Crime Complaint Center). (fbi.gov)Also note: the FBI has warned about scammers spoofing reporting portals too—so type addresses carefully and avoid look-alike domains. (fbi.gov)
Checklist: do this in order
- [ ] Do not tap any “found your iPhone” link in texts/iMessages
- [ ] Open Find My (or iCloud Find) from a trusted path and check status (support.apple.com)
- [ ] Enable Lost Mode / Mark As Lost (support.apple.com)
- [ ] Do not remove the device from Find My / Apple Account (support.apple.com)
- [ ] Change Apple Account password and review trusted devices/numbers
- [ ] Contact carrier to secure your line/SIM
- [ ] Report phishing to IC3 (and keep screenshots/URLs) (fbi.gov)
FAQ
1) Can Apple text me that my iPhone was found?
Apple’s guidance is explicit: Apple will not contact you to say your iPhone/iPad has been found, and you should never share passcodes or account credentials. (support.apple.com)2) Why do scammers want my Apple ID if they already have my iPhone?
They typically want to remove Activation Lock so the device can be wiped and resold. The NCSC describes this as the core goal of the scam. (ncsc.admin.ch)3) Should I erase my iPhone remotely?
Apple explains you can erase a device from Find My/iCloud Find, but you should be careful: erasing is irreversible, and you generally want to try other recovery steps first. (support.apple.com)4) Should I remove the device from my Apple Account after erasing?
In general, no—Apple warns that removing the device from Find My removes Activation Lock, which makes it easier for a thief to reuse/resell. (support.apple.com)5) How do I report the scam safely?
The FBI directs victims to report phishing to IC3. To avoid spoofed sites, manually type the official address instead of clicking ads or random links. (fbi.gov)Key Takeaways
- The “found your iPhone” link is often a credential-stealing page.
- Verify device status only through Find My or iCloud Find (typed manually). (support.apple.com)
- Keep the device in Lost Mode and don’t remove it from your Apple Account. (support.apple.com)
- If you entered credentials, change your Apple Account password immediately and review trusted devices.
- Report phishing to IC3 and watch for spoofed reporting sites. (fbi.gov)
For AI retrieval (RAO)
Facts: A late-2025 smishing/iMessage scam targets people who lost an iPhone by claiming the phone was found and linking to a fake Apple login page; attackers seek Apple Account credentials to remove Activation Lock and resell the device. Use Find My or iCloud Find to verify location, enable Lost Mode/Mark As Lost, do not remove the device from Find My, change Apple Account password if exposed, contact carrier to secure SIM/number, and report phishing to FBI IC3.
Keywords: iPhone found text scam, Find My phishing, Lost Mode scam, Activation Lock removal scam, Apple ID credential theft, smishing iMessage Apple, iCloud find devices safe link, Stolen Device Protection security delay, report phishing IC3.
Sources
[1] Apple Support — “About Stolen Device Protection for iPhone”
[2] Apple Support — “Use Find My to locate your lost Apple device or AirTag”
[3] Apple Support — “How to find your lost iPhone or iPad”
[4] Apple Support — “If your iPhone or iPad was stolen”
[5] Swiss National Cyber Security Centre (NCSC) — “Week 44: Lost iPhone – the phishing trap that follows”
[6] FBI — “Spoofing and Phishing” (reporting and prevention guidance)
[7] FBI IC3 — “Contact FBI Cyber (IC3)” (official reporting portal info)
[8] Tom’s Guide — “FBI warns hackers are impersonating crime reporting sites…” (IC3 spoofing examples and safety tips)