AI-Powered iPhone Theft Scam Uses Voice Impersonation to Bypass Activation Lock

Criminals are using AI-powered voice calls combined with sophisticated social engineering to bypass iPhone Activation Locks on stolen devices. The scam involves impersonating Apple Support across multiple channels—email, SMS, WhatsApp, and phone calls—to extract verification codes and passwords from victims.

How the Scam Works

Security researchers at SOCRadar have identified a sophisticated fraud scheme targeting stolen iPhones. The attack combines multiple elements:

Multiple contact channels: email, SMS, WhatsApp, phone calls
AI-generated voice agents with realistic human-like quality
Stolen device details (model, phone number, Find My status)
Coordinated pressure across platforms to exploit victim anxiety

Attack Progression

Stage 1: Hyper-Personalized Messages Criminals build detailed profiles of stolen devices and craft customized messages. Victims receive messages like "Your iPhone 15 Plus was detected near another Apple device in [specific city]" or "Your lost phone has been recovered at [store/support center]."

Stage 2: Impersonating Official Support An AI voice agent named "Alice" calls the victim, claiming to be from Apple Support. The caller requests device ownership verification, then claims there has been an attempted Activation Lock bypass.

Stage 3: Gradual Information Extraction The conversation progresses from seemingly harmless verification questions to requests for passwords, PIN codes, and two-factor authentication (2FA) codes. Eventually, victims are directed to phishing links.

Warning Signs to Recognize

Unsolicited contact demanding credentials: Legitimate companies never request passwords or verification codes via phone, email, or text
Artificial speech patterns: AI voices may sound natural but often contain unnatural pauses, repeated phrases, or inconsistent accents
Artificial urgency: Threats like "Your account will be locked immediately if you don't act now" are classic manipulation tactics
Multiple simultaneous contact attempts: Real support services don't contact you through multiple channels at once

Prevention Steps

Never share passwords, PINs, or verification codes with anyone, regardless of who they claim to be
When contacted, hang up and call the official customer service number directly from the company's official website
If your device is lost or stolen, use Find My (iOS/iCloud) to lock it remotely immediately
Enable two-factor authentication and store backup recovery codes securely
Review account activity regularly for suspicious sign-ins

Where to Report

Report fraud to local law enforcement and national cybercrime units
Report suspected account compromise directly through the company's official website
Contact your mobile carrier to report the theft immediately