Apple Updates Anti-Theft Guidance to Prevent Extortion and Device Resale
New recommendations distinguish between lost and stolen devices to protect user data.
Apple has revised its official support documentation to address a growing security concern: the tactical difference between a misplaced device and a criminal theft. The updated guidance, released ahead of the peak summer travel season, warns users that traditional recovery methods can inadvertently expose them to extortion or facilitate the illegal resale of hardware.
In its latest recommendations, Apple emphasizes that the Find My application should be used with caution. Specifically, the company now advises against displaying personal contact information on the lock screen if a user suspects their iPhone was stolen rather than simply lost. While providing a phone number or address can help a Good Samaritan return a lost item, Apple notes that providing these details to a thief provides a direct line for social engineering attacks or ransom demands.
The security of modern mobile devices relies heavily on the Federal Communications Commission standards for consumer protection and the hardware-level encryption pioneered by major manufacturers. Since the introduction of Activation Lock in 2013, the resale value of stolen iPhones has plummeted because the devices remain tethered to the owner’s account even after a factory reset.
Apple’s updated instructions highlight a critical error many victims make: removing the device from their account after they have given up hope of recovery. According to the company, deleting a stolen iPhone from the Find My list removes the Activation Lock. This action effectively “cleans” the device, allowing it to be associated with a new Apple ID and sold on the secondary market.
The company insists that even if a device is marked as lost and remains missing for weeks, it must stay linked to the user’s iCloud account to remain a “brick” for unauthorized users. This persistence ensures the device remains useless to anyone without the original owner’s credentials, serving as a long-term deterrent against mobile theft.
