Fake Apple Support SMS after iPhone theft tries to steal your iCloud password
When an iPhone is lost or stolen, scammers send a fake SMS posing as Apple Support saying your device was found. Clicking leads to a counterfeit iCloud login page that steals your Apple ID and 2FA code to unlock and sell the phone.
Also known as: fake Apple Support SMS, fake Find My iPhone SMS, iCloud phishing after phone theft, Apple ID credential theft
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
What to do right now
- 1 Do not click any link in an unsolicited SMS about your lost or stolen iPhone
- 2 If you've already entered credentials, go immediately to appleid.apple.com from a trusted device to change your password and revoke access
- 3 Lock your stolen SIM card with your telecom operator to prevent scammers from receiving SMS OTPs
- 4 Use Find My via the Apple website (icloud.com/find) or another Apple device to locate, lock, or erase your phone — never via an SMS link
- 5 Report to Apple at [email protected] and report the theft to local police
- 6 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Red flags
- ⚠ Apple never contacts customers via SMS or email to say a lost or stolen device was found
- ⚠ The SMS link goes to a domain that looks like Apple but is subtly different (e.g., apple-support-verify.com instead of apple.com)
- ⚠ Message knows your device model, color, and storage because the thief literally has your phone
- ⚠ Page asks for both Apple ID password AND the 2FA verification code — Apple login pages never ask for both in the same form
- ⚠ Extreme urgency: 'verify within 24 hours or your data will be permanently deleted'
Sources
- I4C (NCTAU/MHA) Advisory — Hybrid Cybercrime Targeting iPhone Users
- Trend Micro — Scammers Impersonate Apple via Fake Find My SMS (April 2026)
- The420.in — I4C Warns of Hybrid Cybercrime Targeting iPhone Users
- Apple Support India — Recognize phishing and social engineering
- CyberYodha — iPhone Users Alert: Apple Support के नाम पर साइबर ठगी (I4C May 2026)