Stolen iPhone: Apple's new warning Apfelpatient

Anyone hoping to recover their iPhone should no longer carelessly share their contact information. Apple has updated its theft assistance guide and now explicitly warns against a particularly insidious scam.

A stolen iPhone is not just a material loss, but above all a risk to the data, passwords, and payment information stored on it. This is precisely where Apple comes in, having updated its official support guide for emergencies with more detailed instructions. However, the most important protection begins even earlier: those who activate their iPhone's key security features in a timely manner are significantly better off if theft occurs. The new recommendations show what exactly matters after a theft – and where many people have been making a critical mistake.

Do not display contact details in case of theft

The most noticeable change concerns contact information on the lock screen. Previously, Apple advised users to add a phone number or a message so that an honest finder could return the device. This recommendation now explicitly applies only to misplaced or lost devices.

In the event of an actual theft, Apple now advises against displaying such contact information. The reason: A thief could misuse the information for social engineering attacks. One common tactic involves the perpetrator impersonating Apple or a mobile network provider over the phone and specifically requesting information needed to reactivate the device. Apple also clarifies that it will never call unsolicited to inform customers about a supposedly found device – such a call is itself a warning sign. Device passcodes, passwords, or verification codes should never be shared under any circumstances. Anyone unsure whether unauthorized access has already been gained can find reliable initial indicators in the genuine warning signs of a compromised iPhone.

Do not remove device from Find My

Another tip concerns a well-intentioned but counterproductive reflex: prematurely removing the device from Find My. Deleting a stolen iPhone from the device list also removes the activation lock. This lock is precisely what makes it difficult for a thief to delete and subsequently resell the device – conversely, the same lock must be explicitly removed when selling a regular iPhone so that the new owner can set it up. Furthermore, if you have AppleCare+ with theft and loss coverage, the device should remain in your Apple account until the claim has been fully approved.

Quickly mark as lost

Apple recommends marking the device as lost as the most effective immediate measure. It's worth noting that this also applies if the device protection is active, as its additional safeguards only last for a limited time. Therefore, the best way to protect your iPhone and Apple account is to activate Lost Mode as soon as possible.

The stolen device protection feature, enabled by default since iOS 26.4, requires biometric authentication via Face ID or Touch ID for sensitive actions such as accessing saved passwords or credit cards. If the Apple account password is changed in an unknown location, an additional one-hour security delay is triggered, requiring another biometric verification. This mechanism provides precisely the time needed to activate Lost Mode – even if a perpetrator has observed the device passcode being entered. The close integration of this protection with other features is evident in the fact that Apple Pay security also relies heavily on the activated theft protection.

The quick photo scam

One particularly insidious tactic thieves use to specifically obtain device passcodes is to ask their victim, perhaps in a social setting, if they can take a photo with their iPhone. They then discreetly lock the device by simultaneously pressing the side button and the volume down button, temporarily disabling Face ID. When returning the phone, the victim has to enter their passcode to view the photo – and it's precisely at this moment that the thief is reading along. The actual iPhone is then stolen at the next opportunity. A privacy screen protector or simply entering the passcode discreetly can thwart such attempts.

From recovery to protection against deception

The revised warnings shift the focus away from simply finding the device and towards protecting against deliberate deception. Apple's explicit warning against displaying contact information and removing the device from Find My is a response to scams that target not the technology itself, but rather the behavior of those affected. In an emergency, the order of operations is therefore clear: remain calm, quickly mark the device as lost, do not remove anything from Find My, and do not share any data with potential helpers.

Our cybersecurity collection offers further guides on Apple security – from phishing and account protection to secure Wi-Fi. (Image: Shutterstock / Tatree Saengmeeanuphab)