'We Found Your Phone' Message with a Tracking Link
After you lose a phone, a message says it was found and asks you to click a link or pay a fee. The link steals your cloud login or money.
You have lost your phone and posted about it, or you used the find-my-phone feature. A short while later a message arrives: 'Your lost phone has been found. Click here to see its location and contact the finder.' The link opens a page that looks like your phone maker's login. If you type your account password and code, a thief gets the keys to unlock your device, wipe it or read its data.
How the scam works
The set-up is timing. Thieves who stole a phone want to remove the owner's lock on it. They may use the number on the lock screen, a message in lost mode, or a phone's SIM to send messages. Others simply watch social posts and chat groups for someone saying they lost a phone and then send a text. The message mimics a real location alert and includes a link to a login page that looks like the maker's own.
The pressure is hope and urgency. You are told the phone has been found and you must act quickly before it is moved. The login page asks for your email, password and a verification code. A second variant says a finder wants a small reward through UPI before returning the phone, with an address to meet. Because you want the phone back, you may ignore small warning signs, such as an odd web address.
The payoff is the account credentials, which let the thief switch off lock features, sign out the owner and open the phone's contents, including banking apps and photos. Alternatively, the reward goes to the scammer and the phone is never returned. If your phone had apps with saved logins, the damage can multiply quickly through UPI, wallets and email resets.
An example of what you may see
Example SMS (invented): 'Good news! Your lost phone has been located. View its live location and unlock it for the finder here: (link). Please sign in with your account and enter the code to confirm ownership.' Another message says, 'I am the person who found your phone. Send Rs 2,000 as a reward and I will deliver it tomorrow morning.' The link's address contains a long string of numbers and a word that resembles the maker's name.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A message about your lost phone includes a link and asks for your account login.
- The sign-in page address does not match the maker's official site.
- A code or password is requested to 'confirm ownership'.
- A finder asks for a reward before returning the phone.
- The message arrives soon after you posted about the loss.
- The sender avoids meeting in a public place or a police station.
What to do right now
- Use only the official find-my-device feature from your phone maker's website typed by hand, or Safeavio's portal if you set it up.
- Do not tap links in messages about a found phone.
- Lock or erase the phone remotely from the official tool, and change your account passwords.
- Block the SIM through your operator's official channel.
- If someone says he found it, ask to meet in a public place or at a police station.
If you already paid or shared a code
- If money was sent or accounts were accessed, call 1930 and report at cybercrime.gov.in.
- Call your bank on the number on your card and ask to block cards and UPI on that phone.
- Change email, cloud and banking passwords from a safe device.
- Report the loss to the police with the phone's details.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
If you set up Safeavio Sentinel's anti-theft before the loss, the owner's portal at safeavio.com can locate, ring, lock and show a lost-mode message on the phone, and the SIM-change alert and recovery information help. These work only if the phone is on, online and was set up earlier. Link check can test a link from a 'found phone' message. Safeavio cannot stop a thief who switches the phone off.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How can I tell if a 'phone found' message is genuine?
A genuine finder will not need your account password. Use the official find-my-device tool yourself and treat a link in a message as unsafe. Meet only in a public place or at a police station.
Should I pay a reward to the finder?
Do not pay before you have the phone in your hand. Many such messages are from thieves or scammers. A real finder can hand the phone to the police or meet in a safe place.
What should I do right after losing my phone?
Lock or erase it with the official tool, block the SIM, tell your bank, change key passwords and report to the police. Do these quickly because thieves try to unlock phones soon. Take a friend along when you meet.