The AI Voice Scam That's Helping Thieves Unlock Stolen iPhones

Emily Davis · 2026-08-26

Okay, let's talk about something that feels like it's straight out of a spy thriller, but it's happening right now. You get a call. The caller ID says Apple Support. A calm, professional voice—maybe with a slight accent, maybe not—explains there's been suspicious activity on your account. They need your passcode to secure your device. They sound so real. But here's the terrifying part. That voice isn't human. It's an AI agent, rented by criminals who have your stolen iPhone or iPad. And they're not trying to help you. They're trying to strip Apple's Activation Lock so they can resell your device. Cybersecurity researchers just pulled back the curtain on a whole phishing-as-a-service platform built to do exactly that. ### How This Scam-as-a-Service Actually Works Researchers at SOCRadar's Threat Research Unit are tracking this platform, which they call AnonyMousKIT. Think of it like a dark web subscription box for thieves. It's credit-metered, meaning criminals pay for access to a certain number of attacks. The platform then drives the lures—the fake calls—across its network. The core trick is Activation Lock. It's Apple's brilliant security feature that makes a stolen iPhone or iPad basically a brick without the original owner's Apple ID password. It's saved countless devices. But these scammers have built a business model around breaking it. They use sophisticated AI voice cloning technology to impersonate Apple Support with chilling accuracy. They call the victim, whose contact info is often pulled from the stolen device's emergency medical ID or found through other means. The script is designed to create urgency and trust. They'll mention the device's serial number, which they have. They'll talk about "fraudulent login attempts." All to get one thing: that device passcode or a two-factor authentication (2FA) code. ### Why This Feels Different and More Dangerous This isn't some poorly written email from a "prince." The use of AI voice agents changes everything. Our brains are wired to trust voices. A human-sounding conversation bypasses a lot of the skepticism we've built up against text-based phishing. The scammers can adapt in real-time, answer questions, and sound incredibly legitimate. It's a brutal efficiency play for criminals. They don't need to be tech geniuses; they just rent the service. The platform handles the complex spoofing and AI voice generation. The thief just provides the stolen device's details and reaps the profit once it's unlocked and sold, often for hundreds of dollars. ### What You Can Do to Protect Yourself Right Now First, the golden rule: **Apple Support will NEVER call you out of the blue to ask for your passcode or password.** Ever. If you get a call like this, hang up immediately. Don't press any buttons. Just hang up. - If you're worried, end the call and contact Apple directly yourself through the official website or the Support app on your device. - Never share passcodes, 2FA codes, or passwords with someone who calls you. Legitimate support will verify you through other, secure methods. - Use a strong, unique alphanumeric passcode on your device—six digits isn't as secure as you think. - Make sure your device's medical ID in the Health app doesn't contain a backup phone number for a thief to find. Use a trusted emergency contact instead. As one security analyst recently put it, *"We're moving from an era of phishing emails to one of phishing conversations. The defense has to move from your eyes to your ears."* That shift is happening right now. The real takeaway here is that scams are professionalizing. They're becoming scalable services. Awareness is your primary shield. Tell your friends and family about this. That casual "I got a weird call from Apple today" conversation could be the thing that stops someone from losing access to their digital life. Stay skeptical, even of the voices that sound the most real.