I fact-checked that iPhone theft warning going around
Nine settings that stop a phone thief — plus one claim that needed fixing.
A story has been circulating online: someone’s iPhone gets stolen outside a bar, and within minutes their Apple ID password gets changed — from their own phone. By the time they notice, a thief is inside their email, banking apps, and photos.
I checked the story’s claims against the settings on my own phone. Most of it holds up. One part needed a correction.
How the attack usually works
A thief who grabs an unlocked phone moves fast, roughly in this order:
Swipe into Control Center from the lock screen and turn on Airplane Mode, so Find My can’t report the phone’s location.
Try to pull data through the charging port with forensic tools.
Try to port your phone number to another carrier, so they can intercept the text codes your bank and email provider send you.
If they watched you type your passcode, use it to change your Apple ID password before you can lock them out.
Each of those has a specific setting that shuts it down.
The fixes, in order
Block the Control Center swipe. Settings > Face ID & Passcode > Allow Access When Locked > turn off Control Center.
Block the USB attack. Settings > Face ID & Passcode > USB Accessories > turn it off. After an hour locked, the port stops accepting anything but a charging cable.
Lock your phone number. In your carrier’s app, turn on port-out protection — T-Mobile, Verizon, and AT&T all offer it under different names (Number Lock, Account Takeover Protection, Transfer PIN). Some carriers split this into two settings: one blocking a port to another carrier, one blocking a SIM swap within the same carrier. Turn on both if they’re offered.
Protect against a stolen passcode. Settings > Face ID & Passcode > Stolen Device Protection > turn it on, set Require Security Delay to Always. This removes the passcode fallback for sensitive changes — a thief needs Face ID and a one-hour wait, even if they saw you type your code.
Use a real passcode. Settings > Face ID & Passcode > Change Passcode > Passcode Options > Custom Alphanumeric Code. A 4-digit code has 10,000 combinations. Letters and numbers make it much harder to guess — at the cost of a little more friction each time you type it.
Shorten Auto-Lock. Settings > Display & Brightness > Auto-Lock > 30 Seconds.
Turn on offline finding. Settings > [your name] > Find My > Find My iPhone > turn on Find My Network and Send Last Location.
Clear your location history. Settings > Privacy & Security > Location Services > System Services > Significant Locations. Review what’s there and clear it — it’s a running list of where you’ve been.
Add a recovery contact. Settings > [your name] > Sign-In & Security > Recovery Contact.
What I fixed
The original version of this story claims US iPhones stopped using physical SIM cards in 2022, and that’s why number porting is the attack. That’s only true for iPhone 14 and newer, US models — plenty of people are still on a physical SIM. Porting fraud is real either way, but the SIM-card detail wasn’t the reason for it.
Why this matters more for lawyers
Most of us carry client email, case notes, and calendar details on our phones. A stolen phone isn’t just a personal hassle — it’s a confidentiality problem. These settings take about ten minutes total, and almost nobody touches them until after something goes wrong.
Bottom line
The story making the rounds is close enough to true that it’s worth acting on. Go turn on Stolen Device Protection and your carrier’s port-out lock today — those two catch the parts most people miss.
;-)
Ernie
P.S. In the Inner Circle, we work through important AI questions together. For example, this Thursday we’re doing a session entitled: How Can Claude Work with Tools Like Midpage, DingDuff, and CourtListener for Legal Research?. If you want to join us, sign up for the Inner Circle with a special 30 day trial for just $1.