Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

0dev

macrumors 68040
Original poster
Dec 22, 2009
3,947
24
127.0.0.1
Probably a silly question but I am looking at used iPhones on eBay and someone is selling a 5S that has the activation lock from iCloud on it. In the listing they claim that this lock appeared a month after they bought the phone on eBay themselves.

Obviously if that can really happen it seems worrying to anyone looking to buy a used iPhone, but my question is can that actually happen or is the seller just talking BS because the phone was stolen?

It seems logical to me that if the phone is wiped clean before you buy it, then you set it up with your own iCloud account, the previous owner cannot lock it. So if you buy a used iPhone you just need to make sure the previous owner's iCloud account is not still set up. Is that right?

Thanks!
 
Probably a silly question but I am looking at used iPhones on eBay and someone is selling a 5S that has the activation lock from iCloud on it. In the listing they claim that this lock appeared a month after they bought the phone on eBay themselves.

Obviously if that can really happen it seems worrying to anyone looking to buy a used iPhone, but my question is can that actually happen or is the seller just talking BS because the phone was stolen?

It seems logical to me that if the phone is wiped clean before you buy it, then you set it up with your own iCloud account, the previous owner cannot lock it. So if you buy a used iPhone you just need to make sure the previous owner's iCloud account is not still set up. Is that right?

Thanks!

It can't random become locked out of nowhere. It can only become locked if it is wiped remotely or through DFU restore and the actual owner of the phone doesn't put in their iCloud password to activate it again. But i can't think of a scenario where the owner would forget both his password and his email address. 90% of the time iCloud locked is the equivalent of stolen.
 
It can't random become locked out of nowhere. It can only become locked if it is wiped remotely or through DFU restore and the actual owner of the phone doesn't put in their iCloud password to activate it again. But i can't think of a scenario where the owner would forget both his password and his email address. 90% of the time iCloud locked is the equivalent of stolen.

I thought as much. But if you buy a phone the owner did not wipe, then you wipe it, wouldn't it come up with the activation lock for the previous owner's iCloud account?
 
I thought as much. But if you buy a phone the owner did not wipe, then you wipe it, wouldn't it come up with the activation lock for the previous owner's iCloud account?

You would need the owner's Apple ID and password to wipe the phone via 'Erase all content and settings'.
 
You would need the owner's Apple ID and password to wipe the phone via 'Erase all content and settings'.

But if you did it through iTunes you'd be hit with the activation lock?

I'm just checking here so I know if I have to make sure the previous owner completely wiped the phone and can show it on the home screen after before I buy anything.
 
But if you did it through iTunes you'd be hit with the activation lock?

I'm just checking here so I know if I have to make sure the previous owner completely wiped the phone and can show it on the home screen after before I buy anything.

Basically. Any kind of wipe that isn't through the settings menu whilst iCloud and Find My iPhone is on will present you with an activation lock because it is still registered to that iCloud account.

You could just request a screenshot of the iCloud tab in their settings showing their account is signed out or on the location services settings on the initial set up (The step after activation) to assure you won't be locked out. :)
 
Basically. Any kind of wipe that isn't through the settings menu whilst iCloud and Find My iPhone is on will present you with an activation lock because it is still registered to that iCloud account.

You could just request a screenshot of the iCloud tab in their settings showing their account is signed out or on the location services settings on the initial set up (The step after activation) to assure you won't be locked out. :)

Will do, thank you :)
 
But if you did it through iTunes you'd be hit with the activation lock?

I'm just checking here so I know if I have to make sure the previous owner completely wiped the phone and can show it on the home screen after before I buy anything.
Dude! If someone steals one of our corporate iOS devices, I don't immediately lock it so that I can possibly send its location to the police for a Felony recovery ( recovered 2 out of 3 so far ). If I cannot locate it after a month, we chock it up as a loss and lock them via the cloud to 'brick it'; Standard Operating Procedures.

So, the thief will steal it and sell it quickly to some sucker. The sucker will be happy for about 30 days and then, oops. Brick. Sucker is out $100 bucks and you just committed a Felony ( without you even knowing it ).

You can check the device status here:
https://www.icloud.com/activationlock/

I would make sure to take the device only in person and at a public location, then immediately ( before handing cash over ): Tap Settings > Reset > Erase All Content and Settings. If the device pops up with iCloud password, hand it back to the seller and ask for them to clear it. If they cannot, contact the police.
 
Have you looked at Swappa? I find that a much more reliable place to buy used phones, particularly from people that have a large number of ratings
 
Dude! If someone steals one of our corporate iOS devices, I don't immediately lock it so that I can possibly send its location to the police for a Felony recovery ( recovered 2 out of 3 so far ). If I cannot locate it after a month, we chock it up as a loss and lock them via the cloud to 'brick it'; Standard Operating Procedures.

So, the thief will steal it and sell it quickly to some sucker. The sucker will be happy for about 30 days and then, oops. Brick. Sucker is out $100 bucks and you just committed a Felony ( without you even knowing it ).

You can check the device status here:
https://www.icloud.com/activationlock/

I would make sure to take the device only in person and at a public location, then immediately ( before handing cash over ): Tap Settings > Reset > Erase All Content and Settings. If the device pops up with iCloud password, hand it back to the seller and ask for them to clear it. If they cannot, contact the police.

Lots to be paranoid about. I will buy most of these phones in real life in a public place anyway so like you say I can just check the settings myself. But if I buy one on eBay I can just use the buyer protection to get it sorted because I will check the settings before I do anything with it.

Does the link you've provided work only if activation lock is on, or does it also work if the phone is locked in some other way from iCloud?

Have you looked at Swappa? I find that a much more reliable place to buy used phones, particularly from people that have a large number of ratings

Swappa is a ghost town in the UK.
 
...only if activation lock is on, or does it also work if the phone is locked in some other way from iCloud?
What other way could it be locked via the cloud? It could be passcode locked or passcode/restriction disabled, but these can be overcome by a simple DFU restore via iTunes. The Activation Lock is the kicker.

All of our corporate devices also have additional protection in the form of DEP. It is an Apple program that forces all of our devices to check in with our server the moment they are activated, with or without Activation Lock turned on.

There is absolutely NO way to defeat consumer Activation Lock with access to only the iOS device ( I know, it's my job - full disclosure: I can bypass your Activation Lock if I have the computer that has an iTunes backup on it as well as your iOS device ). I can defeat the Activation Lock on a corporate device ( but it is not easy ), but the forced Supervision will still catch me if have stolen it.

Too many secrets given this day... I go back to my cave to meditate.



Swappa is a ghost town in the UK.
That is awesome!
 
What other way could it be locked via the cloud? It could be passcode locked or passcode/restriction disabled, but these can be overcome by a simple DFU restore via iTunes. The Activation Lock is the kicker.

All of our corporate devices also have additional protection in the form of DEP. It is an Apple program that forces all of our devices to check in with our server the moment they are activated, with or without Activation Lock turned on.

There is absolutely NO way to defeat consumer Activation Lock with access to only the iOS device ( I know, it's my job - full disclosure: I can bypass your Activation Lock if I have the computer that has an iTunes backup on it as well as your iOS device ). I can defeat the Activation Lock on a corporate device ( but it is not easy ), but the forced Supervision will still catch me if have stolen it.

Too many secrets given this day... I go back to my cave to meditate.

Does that activation lock bypass only apply to corporate devices you control? Because I mean if I could do that I'd be able to turn a massive profit from all those iPhones being sold at £50 because of the lock... :p
 
Yes it is possible.
If you are using an iPhone which already has an iCloud account logged into it could potentially be later on erased/icloud locked. This is why it's critical that any iPhone you use that it is not locked any account.
 
Yes it is possible.
If you are using an iPhone which already has an iCloud account logged into it could potentially be later on erased/icloud locked. This is why it's critical that any iPhone you use that it is not locked any account.

Isn't this why Gazelle has you disable Find my iPhone?
 
Yes it is possible.
If you are using an iPhone which already has an iCloud account logged into it could potentially be later on erased/icloud locked. This is why it's critical that any iPhone you use that it is not locked any account.

Thought as much, thanks.

Isn't this why Gazelle has you disable Find my iPhone?

If you sell iDevices to a shop they will ask you for your iCloud password or make you show them that there is no iCloud account set up, in my experience at least.
 
Thought as much, thanks.



If you sell iDevices to a shop they will ask you for your iCloud password or make you show them that there is no iCloud account set up, in my experience at least.

They really expect people to give them their password?
 
Does that activation lock bypass only apply to corporate devices you control? Because I mean if I could do that I'd be able to turn a massive profit from all those iPhones being sold at £50 because of the lock... :p
Yes, activation lock bypass only applies corporate DEP devices.
 
Probably a silly question but I am looking at used iPhones on eBay and someone is selling a 5S that has the activation lock from iCloud on it. In the listing they claim that this lock appeared a month after they bought the phone on eBay themselves.

Obviously if that can really happen it seems worrying to anyone looking to buy a used iPhone, but my question is can that actually happen or is the seller just talking BS because the phone was stolen?

It seems logical to me that if the phone is wiped clean before you buy it, then you set it up with your own iCloud account, the previous owner cannot lock it. So if you buy a used iPhone you just need to make sure the previous owner's iCloud account is not still set up. Is that right?

Thanks!

The lock will appear when the owner decides it. Also, most people do not make a very good check to the iPhone they are planning to buy. You need to verify that the previous owner has erased his/her device, so afterwards he will not be able to lock it. If you are planning to buy a second hand iPhone, first make a full IMEI Check, a Blacklist check and also check if the Find My iPhone feature is ON. Depending on those results, you should buy or not buy it! :D
 
Yep. I'd already done a factory reset though so I just showed them it wasn't locked and they were cool.

Pretty odd. I can definitely understand asking people to disable it right there if it wasn't already done before, but to ask people form their password to their account, that's rather ballsy.
 
Pretty odd. I can definitely understand asking people to disable it right there if it wasn't already done before, but to ask people form their password to their account, that's rather ballsy.

Worse than ballsy. If I were running a store, the LAST thing I would want is random employees gaining possession of personal login credentials that would give access to personal, private information.
 
But if you did it through iTunes you'd be hit with the activation lock?

I'm just checking here so I know if I have to make sure the previous owner completely wiped the phone and can show it on the home screen after before I buy anything.

So you have a stolen iPhone and you're trying to figure out how to get around the security?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.