Indian Authorities Warn iPhone Users: Sophisticated Phishing Scam Targets Owners of Lost or Stolen Devices

New Delhi, May 13, 2026 – If your iPhone has gone missing recently, be extra careful. The Indian Cybercrime Coordination Centre (I4C) has flagged a well-organised phishing campaign that preys specifically on people whose phones have been lost or stolen.

According to the advisory issued on May 5, the scammers already have the physical device in their hands and are using it to trick the rightful owner into handing over their Apple ID credentials and one-time passwords. Once they get in, they quickly remove the original Apple ID from the phone, turn off Find My iPhone, and prepare the device for resale or reuse.

How the Scam Works

1. The attackers follow a clear, step-by-step pattern:

1. 2. They select victims whose iPhones were reported lost or stolen very recently.
2. 3. The owner receives an SMS that looks like it’s from Apple Support or the Find My service. 4. The message usually comes from a numeric sender ID and claims the phone has been “temporarily switched off” or that urgent action is needed to erase personal data.
3. 5. The SMS contains a link that takes the user to a fake website designed to mimic the official Apple login or iCloud page.
4. 6. Victims are asked to enter their Apple ID and password, followed by the two-factor authentication code that Apple itself sends to their trusted device or phone number.
5. 7. With both credentials and the OTP in hand, the scammers log into the victim’s iCloud account, remove the Apple ID from the stolen phone, disable all security features, and effectively take full control.

8. The result? The original owner loses access to their Apple account, photos, contacts, and other linked services, while the thieves can sell or use the now-untraceable device without restrictions.

Official Advice to Protect Yourself

The MHA has issued a clear list of precautions for iPhone users:

• 1. Never click links sent via SMS, especially from unfamiliar or international-looking numbers. Always double-check the URL before entering any login details.
• 2. If your phone is lost or stolen, immediately block it through the CEIR portal.
• 3. Do not share OTPs or enter them on any website other than the official Apple pages.
• 4. Use only the genuine Find My service by going directly to https://www.icloud.com/find in your browser.

iPhone users who have lost a device in the past few weeks are being advised to stay alert and treat any unexpected “Apple Support” message with healthy suspicion. In this case, the thieves aren’t just after the hardware — they’re counting on the owner’s natural anxiety to help them steal the digital life attached to it as well.

How CEIR can help trace your mobile phone?

A particularly useful rescue tool mentioned in the advisory is the Central Equipment Identity Register (CEIR) portal — an initiative of the Department of Telecommunications (DoT). This national platform lets users block a lost or stolen phone across all Indian telecom networks by simply registering its IMEI number. Once blocked, the device cannot be used for calls, data or messaging on any Indian carrier, significantly reducing its value to thieves and helping limit further misuse while recovery efforts are underway.

So far 51,34,747 mobiles have been blocked, 31,96,260 traced and 10,56,811 recovered through CEIR system - which is a unique Government system in the Globe to trace stolen or lost phones.

*********