Stolen Phone Erased - Not in My Devices Anymore!

Question

Level 1

24 points

Stolen Phone Erased - Not in My Devices Anymore!

Hi.

My iPhone was stolen so I placed it in Lost Mode. It was turned on briefly a week later so I set it to be erased. I was then notified (via my wifes phone number not mine) that it has been erased.

I assume this means the thief turned it on a second time, or connected it to a computer.

The device is now no longer accessible in my devices, is this a normal process for erase mode, or has it been compromised? In either case, is my data and information in the cloud and on other devices safe?

Thanks.

iPhone XR, iOS 12

Posted on Jun 3, 2019 3:17 AM

Reply

Answer 1

Top-ranking reply

Michael Black

Level 10

80,623 points

Jun 3, 2019 3:42 AM in response to superdan35

When a device is erased it will no longer show tracking location information as the erasure breaks that connection with the find my iPhone servers. However, as long as that device is listed in your iCloud account, activation lock prevents anyone from actually setting it up and using it. So don’t delete the name of that device from your iCloud account and activation lock will stop anyone from being able to complete iOS activation on it.

Your iCloud data will be inaccessible to anyone without your AppleID and password (and a 2FA code if you use 2 factor authentication). Please do not respond to any texts or emails about your device being found or any other messages.

Apple does not do anything about lost or stolen personal devices, so they will never contact anyone about their missing iPhone or iPad - any such messages are phishing for your password to get into your AppleID accounts.

Reply

Answer 2

superdan35 Author

Level 1

24 points

Jun 3, 2019 6:35 AM in response to superdan35

Also, now I think about it. If that text message was fake, was my phone even erased?

So my question actually should be, how does a device leave "my devices" without me doing it?

Reply

Answer 3

Jun 3, 2019 7:19 AM in response to superdan35

It doesn’t. It can only be completely removed from your listed devices in iCloud or your trusted devices in your AppleID management portal if someone knows your AppleID password (see Turn off Find My iPhone Activation Lock - Apple Support). So now to me it sounds like her AppleID was compromised when she clicked that link to “check” as that was not an Apple message (the only notifications Apple sends contain information only - they never include any actionable links or URLs or responses). And Apple’s iCloud system won’t ever send you a text - it uses the iCloud notifications system for information.

Apple itself will never contact anyone about their missing devices - they literally do not know it is even missing as they don’t take reports of lost or stolen personal property and they are not monitoring your iCloud account at all (see If your iPhone, iPad, or iPod touch is lost or stolen - Apple Support).

See this document to resecure her AppleID - https://support.apple.com/en-us/HT204145

Reply

Answer 4

superdan35 Author

Level 1

24 points

Jun 3, 2019 6:28 AM in response to Michael Black

Thanks for the answer Michael. Very helpful.

We assumed that my wife received a text message saying the phone had been erased and a link to check the status because we listed her number as the contact incase found - but it seemed odd my Apple ID did not get notified by email or text. Could this have been phishing? I have since changed my password and logged out of all devices as a precaution.

My main question though, was that after we received the the text message, I logged into my Apple ID and Find My Phone (not via the link in the text message may I add) and the missing phone was not listed. Is this normal for it to remove itself?

Thanks.

Reply

Answer 5

superdan35 Author

Level 1

24 points

Jun 3, 2019 7:32 AM in response to Michael Black

Thanks again Michael.

The message was sent to her, and she clicked on the link but didn't sign in. I then signed in to my account from my new device using the Find My Phone app, and again via the web on my Mac. Are you suggesting that even by just clicking the link she could have compromised her account?

In my account nothing looks out of place, except the device not being there. Should we therefore assume that they managed to access my account, remove the device (therefore rendering it usable) and simply logged back out? Or, were they able to remove the device from my wife's account as we are listed as family?

I have noticed that when I try logging in, the 2 factor authentication says my account is being accessed near Watford, but I am in Huddersfield. The device was switched on by the thief in Ilford, which is near Watford. I assumed this was just my ISP causing the geographical mix-up, but I have just tried using 4G and it says Watford again. Once in, my devices are showing the correct location. Why might this be?

Thank you again!

Reply

Stolen Phone Erased - Not in My Devices Anymore!

Similar questions