The Genesis of a Thief

Johnson's venture into crime stemmed from desperation. Living on the streets and struggling to care for his children, he was lured into the lucrative realm of phone theft.

His approach was both straightforward and effective: he focused on patrons in bars, discreetly observed their passcodes, and swiftly made off with their iPhones. This technique was alarmingly effective, propelling him deeper into a life of crime.

Mastering Deception

Central to Johnson's strategy was social engineering. By masquerading as a drug dealer or a rapper, he engaged with his primary targets—college students—to gain their confidence. This tactic not only facilitated the theft of their phones but also their passcodes, granting him unfettered access to their digital lives.

His victims, often inebriated and unaware, fell prey to his well-practiced schemes.

Exploiting Security Gaps

Once he secured both the phone and the passcode, Johnson acted rapidly. He would reset the iCloud password, effectively locking the original owner out, and enable 'Find My iPhone,' making the device his own.

This process was executed in mere seconds, allowing him to drain bank accounts, open credit lines, and indulge in extravagant purchases via Apple Pay. Johnson's adeptness in maneuvering through Apple's security features was both impressive and alarming.

The Profitability of iPhone Theft

Johnson's illegal activities extended beyond merely stealing data; he also generated income by selling the stolen iPhones. Targeting high-end models, he could earn up to $900 per phone, raking in an astonishing $20,000 on a particularly successful weekend.

Johnson was not alone in this endeavor; he operated within a broader network that, according to law enforcement estimates, may have pilfered between one and two million dollars.

Apple's Countermeasures & Future of Digital Safety

In response to the rising tide of these crimes, Apple rolled out the 'Stolen Device Protection' feature in iOS 17.3, adding a crucial layer of security against iPhone theft. This feature safeguards users when their passcodes are compromised.

If a stolen iPhone is detected at an unfamiliar location, Stolen Device Protection necessitates both the passcode and FaceID for sensitive actions, such as accessing stored passwords or wiping the device. This measure ensures that thieves cannot modify or access settings using just the passcode.

Moreover, altering the user's Apple ID password or removing FaceID requires a one-hour delay and a subsequent FaceID verification.

Despite these advancements, vulnerabilities in third-party applications like Venmo and Apple Pay continue to present risks.

A Tale of Caution

Johnson's story transcends a mere account of crime; it serves as a crucial reminder regarding the significance of safeguarding our digital identities. While serving his 94-month sentence, Johnson reflects on his actions with remorse, recognizing the damage inflicted on his victims.

His experience underscores the necessity of vigilance in protecting our digital selves, emphasizing that sometimes the most significant vulnerabilities lie within us.

This video features an iPhone thief detailing his methods and the strategies he employed to break into devices.

This video explores how iPhone thieves are managing to lock owners out of their devices, revealing alarming tactics and strategies.