After losing an iPhone, users may become targets of calls and messages impersonating Apple, claiming that the device has been found or requesting verification to "protect the account." This could be the first step in a scheme to steal Apple IDs and personal data.
Under the pretext of assisting in finding the device, scammers send fake Apple links requesting passwords, two-factor authentication codes, and unlock passcodes. By following these instructions, users risk losing control of their Apple ID and exposing data synced on iCloud.
Losing a device does not necessarily mean losing data, but providing account information to scammers can put iCloud data in danger. Bkav cybersecurity experts recommend:
• Do not provide passwords, verification codes, or iPhone passcodes to anyone.
• Do not access links sent via messages or phone calls after losing a device.
• Do not believe notifications requesting an Apple ID login to "recover" or "unlock" the iPhone.
• Proactively use the Find My (Find My iPhone) feature and official Apple channels to handle lost devices.
• If account information has been provided, promptly change the Apple ID password and review currently logged-in devices.

Bkav