The message says your stolen iPhone was found. Do not remove its protection for a stranger
After a theft, a location alert or a plea from a supposed buyer can pressure you into changing the wrong setting. Separate device recovery, account security, and Activation Lock.
Days after your iPhone is stolen, a message arrives saying it has been located. The link resembles an Apple service. Or someone says they innocently bought the phone and needs you to remove it from your account. Another message may become threatening, claiming your photographs or personal information will be exposed unless you comply.
These stories ask for different emotions—hope, sympathy, fear—but can converge on the same action: surrendering credentials or removing protection from the stolen device. Do not change security settings at the direction of the person who contacted you. Open Apple’s official recovery tools independently.
It is important to be precise. Remotely erasing a device, removing it from Find My, and reviewing devices associated with your Apple Account are not interchangeable operations. A vague instruction to “remove the phone” can hide a consequential difference.
Start from the theft, not the new message
Use another trusted device or type the known iCloud Find Devices address yourself. Review Apple’s current stolen iPhone and iPad guidance, which advises marking the device as lost and not removing it from Find My. Apple also states that it will not contact you to announce that a stolen iPhone or iPad has been found.
That means an incoming “found” message is not a reason to enter your Apple Account password through its link. Check the real service separately. A message containing the model, your phone number, or a plausible location still does not establish the sender’s identity.
Contact your mobile provider about the stolen phone and service, and report the theft to local police as appropriate. Do not attempt to retrieve the device yourself from an unfamiliar location shown on a map. A location indication is information for the authorities, not an instruction to confront anyone.
Keep the stolen device’s protection in place while following official theft guidance.
Do not use a sender’s link to sign in or disclose a passcode.
Preserve evidence and seek appropriate help; do not negotiate by weakening security.
Understand which protection the stranger wants removed
Apple’s Activation Lock explanation describes how Find My links the device to an Apple Account and helps prevent unauthorized reactivation. It can remain relevant even after a remote erase. This is why a person holding a stolen phone may want the previous owner’s cooperation.
The practical implication is not that the phone is impossible to misuse or that all your information is automatically safe. Security depends on the device state, settings, software, and what the person knows. It means removing a protection should be your informed decision through the official process, not a favor performed for an unverified stranger.
If the sender claims that removal is necessary to delete your data, do not accept that explanation. Consult the official erase guidance and support route. The person seeking the change has an interest in how you interpret it.
Similar words, different actions
| Action or request | What to understand | Decision boundary |
|---|---|---|
| Mark the device as lost | A theft-response action in Apple’s official tools | Do it through the real service, not a message link |
| Remotely erase | A consequential data action with device-specific behavior | Read current guidance and backup implications first |
| Remove from Find My | Can remove Activation Lock | Do not do it merely because an unknown holder asks |
| Review Apple Account device list | Account-security management is a separate context | Read the exact screen and official instructions |
| Share the device passcode | Gives a secret to an unverified party | Do not disclose it |
| Enter a password at a supplied link | May give account access to the sender | Navigate independently instead |
Apple’s current theft article explicitly distinguishes its account-device review from removing the phone from Find My. This article therefore does not give a blanket instruction to leave every device entry untouched forever. It says to use the documented process for the specific security task and to avoid confusing a stranger’s request with Apple’s guidance.
“I bought it and did nothing wrong”
The message may come from a person claiming to be an innocent secondhand buyer. That could be true, false, or impossible for you to establish. You do not have to solve their purchase dispute by unlocking a device stolen from you.
An actual buyer can pursue the seller, marketplace, payment provider, or official support options available to them. Do not send your proof of purchase, identity documents, password, or passcode to help an unknown person construct a claim.
You can use one short reply if needed: “This device was stolen. I will handle it through the police and official support.” You are also free not to engage. Repeated discussion can expose more details and give the sender more opportunities to change the story.
When the message becomes a threat
A sender may claim to possess private photographs or know where you live. Treat threats seriously without assuming every claim is true. Preserve the message, account identifier, date, and any evidence already available. Do not request proof that would require opening an unknown file or logging into another site.
Contact local law enforcement if there are credible threats, stalking concerns, or immediate danger. If a specific account may be compromised, secure it through the official service. Threatening language is not a reason to send money or remove Activation Lock; those actions do not guarantee the threats will stop.
Tell someone you trust what is happening. Keeping the messages secret can make the pressure harder to resist. The old-password sextortion guide examines a related problem: possession of one real detail is used to make a much larger claim about access seem certain.
If you already followed the link
Opening a page and entering credentials are different events. Write down what you actually did: typed a password, supplied a verification code, shared the device passcode, approved a prompt, installed software, or changed a setting. Avoid assuming either that nothing happened or that every account is lost.
If credentials were entered, use a trusted device and Apple’s official account-security process to change them and review recovery information. Check for unfamiliar changes. If the same password was used elsewhere, change it on those services too. If a work-managed phone is involved, contact the organization’s IT team promptly.
If you already removed the device from Find My, consult official support about the actual state and available options. Do not pay a third party promising guaranteed restoration of a lock or recovery of the phone. The recovery-scam guide explains why a theft can attract a second paid rescue story.
Remote erase is not a casual cleanup button
Apple’s Find Devices erase documentation explains the consequences of erasing and the continued role of Activation Lock. Review the current instructions for your device before acting. Do not copy a sequence from a stranger’s screenshot without understanding what each screen will do.
If an insurance or theft-and-loss claim is involved, follow the insurer’s and Apple’s current claim requirements. Do not make an irreversible account or device change merely to tidy a list before checking those requirements. Keep claim references and purchase records privately.
This separation matters: protecting data, preserving device protection, managing account access, and pursuing a replacement are related but distinct tasks. A sender who compresses them into one urgent instruction is removing the very context you need to make a safe decision.
Help a family member make one clear record
Create a short timeline with the theft date, police or carrier references, actions taken in official tools, and suspicious messages received. Keep screenshots in a private folder. This reduces the chance that two helpers give contradictory advice or undo a protection another person just enabled.
Do not pass the account password around a family chat. Help the owner navigate the official process while keeping control of their credentials. If access to trusted devices is limited, use Apple’s documented recovery options rather than an unsolicited “technician.”
You may never receive a satisfying answer about where the phone ended up. That uncertainty is frustrating, but it does not make the person messaging you a reliable guide. The next security decision should be based on the real account and official instructions, not on the story attached to a location pin.
Found a factual error or a source that has changed?
Send a correction →
