# Interesting iMessage - gotta be a scam, right?

**URL:** <https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [August 19, 2019, 8:28pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905 "2019-08-19T20:28:53Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ravenman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ravenman/32/2929_2.png) [@Ravenman](https://boards.straightdope.com/u/Ravenman)\
**Post date:** [August 19, 2019, 8:28pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/1 "2019-08-19T20:28:53Z")

</div>

I got an iMessage from a gmail account that looked like an address that a real person might use. It said,

> [@](#):
>
> Hello, is this (my name, correctly spelled)? I found a phone on eBay, and I fixed it, but it has a passcode. I believe t may be your phone is your spouse’s phone. It’s an iPhone 6S Plus. Is there any way you could either remove Find My iPhone, or give me the passcode to unlock it? Thanks in advance.

There is like a one in a million shot that this guy got an old iPhone of mine from eBay. I don’t think so, but remotely possible.

So how did this guy get my name and email/phone to send the message? The odd thing is - if he got an old iPhone, it would have been connected to an Apple account “owned” by “George Jetson,” not me, and with an email that’s essentially a dead drop. I can’t figure a way he would get my name/contact info from a locked iPhone anyway.

I’m also intrigued because there is no phishing link, which I would expect in a scam.

Any ideas what’s going on here?

---

<div class="post-metadata">

**Author:** ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)\
**Post date:** [August 19, 2019, 8:42pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/2 "2019-08-19T20:42:19Z")

</div>

Curious.

Did you ever own a phone of that model?

Do you still have that phone, or did you resell it / trade it in / turn it in for an insurance replacement? Was it ever stolen?

You might be able to have your wireless provider (if you’ve been with the same one for a while) provide the IMEI or whatever for any similar phones.

Or you could tell the person to check with the seller, as it seems like he’s been sold a stolen phone.

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [August 19, 2019, 8:44pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/3 "2019-08-19T20:44:29Z")

</div>

Well, I’ve done this…  
I bought a phone off of eBay, found out it was locked (after I fixed it enough to get it to power up), and contacted the owner. He said it was stolen from him, and was happy to get it back.

---

<div class="post-metadata">

**Author:** ![ISiddiqui](https://avatars.discourse-cdn.com/v4/letter/i/97f17d/32.png) [@ISiddiqui](https://boards.straightdope.com/u/ISiddiqui)\
**Post date:** [August 19, 2019, 8:45pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/4 "2019-08-19T20:45:58Z")

</div>

So I’ve never owned an iPhone, but I wonder if turning off Find my iPhone or providing the passcode would compromise your current phones (if you use the same passcode for it).

---

<div class="post-metadata">

**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\
**Post date:** [August 19, 2019, 8:48pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/5 "2019-08-19T20:48:10Z")

</div>

It looks similar to other phishing scams out there. I would not even answer it.

---

<div class="post-metadata">

**Author:** ![DCnDC](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dcndc/32/2842_2.png) [@DCnDC](https://boards.straightdope.com/u/DCnDC)\
**Post date:** [August 19, 2019, 8:52pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/6 "2019-08-19T20:52:33Z")

</div>

Let’s see, an anonymous stranger contacts you via email, claims to have your personal property, and is asking for not just personal, but security-related information. Sounds totally legit.

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [August 19, 2019, 8:54pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/7 "2019-08-19T20:54:52Z")

</div>

Have him send you a photo of the lock screen.  
Did you have a personalized background photo?

ETA: look at the “Find my iPhone” page, see if there is an unknown phone showing up.

---

<div class="post-metadata">

**Author:** ![Ravenman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ravenman/32/2929_2.png) [@Ravenman](https://boards.straightdope.com/u/Ravenman)\
**Post date:** [August 19, 2019, 9:01pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/8 "2019-08-19T21:01:34Z")

</div>

> [@Mama\_Zappa](#):
>
> Did you ever own a phone of that model? .

I had a 6, which I used as a phone to loan guests if they visited me here. One neglected to return it recently, which I didn’t really care too much about. It wouldn’t expect this person to lose it or sell it on eBay, but I can’t totally rule that out, which is why I say there’s a one in a million chance this happened. But again, it wouldn’t have my name/email on it.

> [@Sunny\_Daze](#):
>
> It looks similar to other phishing scams out there. I would not even answer it.

Yeah, but what’s the angle? That’s what I’m curious about.

---

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [August 19, 2019, 9:02pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/9 "2019-08-19T21:02:23Z")

</div>

> [@Sunny\_Daze](#):
>
> It looks similar to other phishing scams out there. I would not even answer it.

That’s what I would do. Delete the message and never think about it again.

> [@beowulff](#):
>
> Have him send you a photo of the lock screen.  
> Did you have a personalized background photo?
> 
> ETA: look at the “Find my iPhone” page, see if there is an unknown phone showing up.

On the off chance that that’s the case, I like the idea of having him send a picture of the phone (and, for good measure, the IMEI number). But even still, if the phone still shows up on the OPs iCloud/find my phone, I’d suggest not unlocking it, but erasing it. Even if this is all 100% legit, you still don’t want them on one of your old devices, with all your info still on it.

But I’m going with fake. They probably just picked random numbers and asked for passcodes. With the number and passcode, they can probably get more access through iCloud than you’d like them to have.

---

<div class="post-metadata">

**Author:** ![Ravenman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ravenman/32/2929_2.png) [@Ravenman](https://boards.straightdope.com/u/Ravenman)\
**Post date:** [August 19, 2019, 9:02pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/10 "2019-08-19T21:02:59Z")

</div>

> [@beowulff](#):
>
> ETA: look at the “Find my iPhone” page, see if there is an unknown phone showing up.

There is not. But it was most recently operated on a prepaid plan that has surely run out by now, so no surprise.

---

<div class="post-metadata">

**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\
**Post date:** [August 19, 2019, 9:14pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/11 "2019-08-19T21:14:13Z")

</div>

> [@Ravenman](#):
>
> I had a 6, which I used as a phone to loan guests if they visited me here. One neglected to return it recently, which I didn’t really care too much about. It wouldn’t expect this person to lose it or sell it on eBay, but I can’t totally rule that out, which is why I say there’s a one in a million chance this happened. But again, it wouldn’t have my name/email on it.
> 
> Yeah, but what’s the angle? That’s what I’m curious about.

To get your security info: whatever info they can trick you into releasing. Answering them would just be the first step.

---

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [August 19, 2019, 9:19pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/12 "2019-08-19T21:19:09Z")

</div>

> [@Sunny\_Daze](#):
>
> To get your security info: whatever info they can trick you into releasing. Answering them would just be the first step.

Go to iCloud and see how much info you need to get into an account. He already has your phone number and he’s asking for your passcode. Can you get in with just that? If not, the next question will probably be “no, that didn’t work, it’s asking for a password, do you know what the password was on this phone?” or “it’s asking for an email address now”. Once he’s in, he’ll have control over you iCloud account, your current phone (if it’s an iPhone), the ability to buy things, like iTunes gift cards, if you have a credit card attached to the account etc.

Don’t even bother with it (unless you want to string him along for a while). If you really want to do something about it, report it to Apple.  
ETA, and maybe change your itunes/icloud password just in case.

---

<div class="post-metadata">

**Author:** ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)\
**Post date:** [August 19, 2019, 9:33pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/13 "2019-08-19T21:33:14Z")

</div>

> [@Ravenman](#):
>
> There is not. But it was most recently operated on a prepaid plan that has surely run out by now, so no surprise.

If someone borrowed it and did not return it, it’s stolen.

Contact your prepaid provider and see if you can get them to brick it.

When the person borrowed it, did s/he register it under his own iCloud account? You might want to contact the borrower and let him know of the odd request you got. If it was registered to an account associated to your throwaway address, maybe that’s where you need to go to see if it’s registered - and brick it there.

Whether the person contacting you is legit or not, there’s zero benefit to you to engaging the person.

And I’m pretty sure there are ways to get around simple passcode locks, so the person might have done this and gotten just enough info to figure out who owned the phone, and then it’s relatively simple to track you down.

---

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [August 19, 2019, 9:37pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/14 "2019-08-19T21:37:07Z")

</div>

> [@Mama\_Zappa](#):
>
> And I’m pretty sure there are ways to get around simple passcode locks, so the person might have done this and gotten just enough info to figure out who owned the phone, and then it’s relatively simple to track you down.

I don’t think there is. Wasn’t that a whole big thing a few years ago when the police confiscated a phone from someone that shot up a mall, but Apple said that not even they could get past the passcode. There’s no backdoor.

---

<div class="post-metadata">

**Author:** ![zbuzz](https://avatars.discourse-cdn.com/v4/letter/z/e19b73/32.png) [@zbuzz](https://boards.straightdope.com/u/zbuzz)\
**Post date:** [August 20, 2019, 4:03am UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/15 "2019-08-20T04:03:08Z")

</div>

I’m confused a bit, did the guy send you a text message or an email? You say he sent you an iMessage, but you’re also asking how did he get your email.

Either way, he claims he has an iPhone 6s Plus, you say you had an iPhone 6. He doesn’t have your phone, apparently.

It’s a scam. One of angles might be to see if you’re the kind of person who will disable security features and send passcodes to strangers without asking questions.

---

<div class="post-metadata">

**Author:** ![casdave](https://avatars.discourse-cdn.com/v4/letter/c/c6cbf5/32.png) [@casdave](https://boards.straightdope.com/u/casdave)\
**Post date:** [August 20, 2019, 12:40pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/16 "2019-08-20T12:40:17Z")

</div>

The trick by the scammer is to send out load of these, your email might be harvested from almost anywhere - its simply a matter of chance that the model of phone was one that you have owned.

Others got the same message but the guess of the previous model of phone is likely wrong - fire out enough messages like this and eventually the scammer will hit the right combination with some of their messages, and those where they didn’t are no problem because they won’t ever respond.

Its just a numbers game.

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [August 20, 2019, 2:29pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/17 "2019-08-20T14:29:08Z")

</div>

> [@casdave](#):
>
> The trick by the scammer is to send out load of these, your email might be harvested from almost anywhere - its simply a matter of chance that the model of phone was one that you have owned.
> 
> Others got the same message but the guess of the previous model of phone is likely wrong - fire out enough messages like this and eventually the scammer will hit the right combination with some of their messages, and those where they didn’t are no problem because they won’t ever respond.
> 
> Its just a numbers game.

But to what end?

Removing iCloud lock from a phone they don’t possess is pointless.

I think it’s not a scam, and I would engage them to get more information.

---

<div class="post-metadata">

**Author:** ![purplehorseshoe](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/purplehorseshoe/32/2996_2.png) [@purplehorseshoe](https://boards.straightdope.com/u/purplehorseshoe)\
**Post date:** [August 20, 2019, 2:43pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/18 "2019-08-20T14:43:07Z")

</div>

But to what end?

The O.P. stands to gain nothing but could easily find themself with a world of trouble and headache.

If you are gonna respond, OP, then at least make it a ransom. Tell 'em they need to send you X dollars, in return for your cooperation.

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [August 20, 2019, 3:10pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/19 "2019-08-20T15:10:55Z")

</div>

> [@beowulff](#):
>
> Well, I’ve done this…  
> I bought a phone off of eBay, found out it was locked (after I fixed it enough to get it to power up), and contacted the owner. He said it was stolen from him, and was happy to get it back.

How did you know who the owner was if the phone was locked?

I have not owned an iPhone but what happens if you enter the wrong unlock code too many times? Does it factory reset, or does it brick?

---

<div class="post-metadata">

**Author:** ![OttoDaFe](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ottodafe/32/356_2.png) [@OttoDaFe](https://boards.straightdope.com/u/OttoDaFe)\
**Post date:** [August 20, 2019, 4:29pm UTC](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905/20 "2019-08-20T16:29:42Z")

</div>

> [@beowulff](#):
>
> > [@casdave](#):
> >
> > The trick by the scammer is to send out load of these, your email might be harvested from almost anywhere - its simply a matter of chance that the model of phone was one that you have owned.
> > 
> > Others got the same message but the guess of the previous model of phone is likely wrong - fire out enough messages like this and eventually the scammer will hit the right combination with some of their messages, and those where they didn’t are no problem because they won’t ever respond.
> > 
> > Its just a numbers game.
> 
> But to what end?
> 
> Removing iCloud lock from a phone they don’t possess is pointless.
> 
> I think it’s not a scam, and I would engage them to get more information.

There’s a non-zero chance this has nothing to do with a phone. Any phone. Since most people (not excepting yours truly :() are somewhat lazy about reusing passwords/passcodes, anyone who responds to the request has given the scammer a valid email and password combination; then said scammer can use that combo to attack other accounts the respondent may have. And especially since the Equifax attack, I’d be willing to bet there are one or more lists out there linking email addresses to bank and credit accounts.

[Next page](https://boards.straightdope.com/t/interesting-imessage-gotta-be-a-scam-right/838905.md?page=2)
