New Delhi: The National Cybercrime Threat Analytics Unit (NCTAU), working under the Ministry of Home Affairs of the Central Government, has issued a big warning for iPhone users. Criminals are now running a new and dangerous phishing campaign to easily make stolen or lost iPhones their own. This campaign is targeting people whose iPhone has recently been lost or stolen and is in the possession of criminals. Criminals send fake SMS pretending to be Apple Support and take advantage of people’s panic.
How are the criminals working?
- Target is selected: They target people whose iPhone has been recently lost or stolen and their phone is in the possession of the fraudsters.
- Fake SMS is sent: Users receive a message from Apple Support or ‘Find My Device’ with an SMS header containing an international number. It says that your lost phone is temporarily turned off or take action to erase contacts, photos and data immediately.
- Takes to fake website: When the user clicks on the link, he is taken to a fake website that looks exactly like the real Apple Support or iCloud login page.
- Apple ID and OTP theft: On this fake page, the user is asked for Apple ID and password. After this OTP (One-Time Password) or 2FA code is also taken.
- Capture device: After getting all the information, criminals enter the iCloud account, remove the Apple ID from the stolen phone. After this the fraudsters turn off ‘Find My iPhone’ and sell or use the phone without any restrictions.
How to avoid falling prey to fraudsters?
NCTAU has asked people to take some precautions to avoid falling prey to fraudsters, such as:
- Do not click on any link in SMS, especially messages containing international numbers.
- Check the URL carefully, never enter password or OTP on unknown websites.
- Get your lost or stolen mobile blocked immediately on CEIR portal.
- Do not tell OTP to anyone and do not enter it on an unverified site.
- Always use the official Apple website:
- Double check before removing a device from your Apple ID, and always keep ‘Find My iPhone’ turned on.
- Be sure to keep Two-Factor Authentication (2FA) active, use strong passwords, and always keep the device updated.
- immediately if you become a victim of phishing Report at or call helpline number 1930.
The government has clearly said that your awareness is the biggest security. You can keep your Apple account and device safe only by avoiding fake links and OTP theft.
