Stolen IPHONE - iCloud Account Compromised and Locked by Thief

Hello Apple Community -


I'm writing this message because I need this to be brought to Apple's attention immediately. This is a cry for help - as my personal information and security is at risk.


Friday night my phone was stolen, and by the time I was able to log onto my computer to check Find My iPhone, the thief had accessed my iCloud, changed the password to my account, and began their tirade of transferring bank funds, making purchases with my Apple Pay, etc. They now have access to all of my data, pictures, texts, contacts, passwords.


The thieves were smart - once they logged into my iCloud and changed the password, they activated a Recovery Key (a 28 character key used to unlock an iCloud account with a forgotten password). A smart idea by Apple, however, this being used by thieves to make sure their victim cannot access their iCloud account.


It looks like the trusted phone number on my stolen iCloud is still my current phone number (which I have not changed). Because my stolen iCloud account is still active, I'm worried that any new texts being sent to my phone number are also being received by the stolen iCloud account. Previously, I had send and receive iMessages being routed to both my phone number and my stolen iCloud account.




On top of this, even though my stolen iCloud account has my phone number as the trusted number, I can't recover my account because of this stupid recovery key. Also, having recovery key enabled disables the ability for Account Recovery, so that isn't an option.


I know sophisticated hackers are out there, and you'd be a fool to think there isn't sophisticated software coming out to crack into locked phones. All I'm asking is for someone at Apple to provide answers. I've spoken with countless Apple Advisors and spent hours trying to combat this for my own personal safety, but I haven't gotten clear information.


I also wanted to add: I have an iPad that was a trusted device on my stolen iCloud account and it was logged into the iCloud prior to being stolen. Now, I can't sign out of my iPad's iCloud account - meaning, the thief has access to my iPad's location at all times as long as the device is on. I can't hard reset the iPad because it requires the password to my iCloud account, which I DONT HAVE.


All I want to know is:


1) Can the hacker still see iMessages directed to my phone number on my stolen iCloud account?


2) Given my phone number is the trusted phone number for this stolen account, can't something be done (a case being escalated, SOMETHING) so that I have a chance at getting my information back?



Any help / discussion is greatly appreciated. Thank you. Please lets get this in front of the higher ups at Apple because this is a genuine safety and privacy concern for all of Apple's consumers.


God Bless.


iPhone 13 Pro

Posted on May 29, 2023 5:33 PM

Reply

Similar questions

21 replies

Oct 31, 2023 11:51 AM in response to S2000_Racing

S2000_Racing wrote:

Everyone that’s in the same difficult situation should send feedback to Apple via Product Feedback - Apple. Apple, while touting its high level of security has came up with the most flawed account recovery system, with no human review nor intervention available if your Apple ID is hijacked...


Do also consider proposing a better account-recovery system than what is available (and with or without security keys or recovery keys), and particular a system that works at the scale of billions, across myriad countries and regions and languages, and a system that can be equitably and economically implemented, and that is reasonably resistant to social engineering.

Oct 31, 2023 12:27 PM in response to MrHoffman

There are quite a few that’s right off the top of my head:


  1. Security questions as someone aforementioned.
  2. Automated camera feed verification. 2D with ID or leverage Apples Face ID technology and hardware that’s already available.
  3. Some human review of login patterns and escalation path. Apple sells their devices for thousands of dollars and only small percentage of users would have to go through this horrible situation, so don’t tell me this is not economical for Apple. Sounds like Apple decided to cut cost on this front because it’s not something that will hurt their PR. Well, if enough users go to social media exposing this severely flawed system maybe they’ll finally invest <1% of their revenue on a better system.

Jan 26, 2024 3:51 AM in response to mypostneedsattentionNOW

I can identify with this story 100%. within hours of the stolen iPhone, the thief changed my Apple ID password and took full control of the phone. Issues of mark as lost, Find my phone etc were promptly disabled. Apple says to go to iforgot.apple.com and change the password immediately but once there you begin a recovery.


Iphone suspects you more than the thief going by the recovery questions subjected to me, the real owner. The trusted gadget to send code is meanwhile still with the thief hence apple will use other means/numbers to verify your claim.


The recovery period is days away depending on the information given. Meanwhile, the thief will have reached the credit cards, mobile money and done the damage. IPhone developers have to have a personalised security question that will make it hard for the thief to have a field day as is currently the case.


I lost my phone a week ago and I am yet to have access to my iPhone ID. Sad!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Stolen IPHONE - iCloud Account Compromised and Locked by Thief

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.