My Apple account was compromised in October 2023 after a phishing attack. The attackers changed the account email address and password, accessed my bank account, remotely erased my iPad Pro, and placed it under Activation Lock. I also lost access to my MacBook and many iCloud photos.
The iPad has been in my possession since I bought it in 2021, and I still have the device. I have the original purchase documentation showing its serial number, photos of the engraved serial number, emails showing unauthorized account changes, Find My notifications, previous support case numbers, and a detailed timeline of the incident.
I recently asked Apple Support for another review. A senior advisor escalated the matter to the Activation Lock team, but they ultimately denied the request. I am not looking for a bypass or anything that violates Apple's security policies. I want to know whether there is any legitimate escalation route left, such as account-recovery specialists, Executive Relations, an Apple Store appointment, or a police report documenting the compromise. Has anyone successfully reopened a case after a final Activation Lock denial, or is the device effectively unusable once that decision is made?
4 Answers
Account recovery and Activation Lock are usually treated as separate issues. If the attackers changed the trusted contact information and enabled Lost Mode, support may be unable to restore access or remove the lock. Apple’s account-recovery process is still worth trying, but support typically cannot manually change the security details without successful verification.
Make sure you have filed reports for both the phishing incident and the unauthorized bank transfer. Those reports probably will not force Apple to remove Activation Lock, but they create an official record and may help with financial recovery or any further escalation. Also secure the replacement account, bank accounts, email, phone number, and any remaining devices before pursuing another review.
The most legitimate in-person option is to take the iPad, government ID, and the original retailer or Apple receipt showing the serial number to an Apple Store. Store staff cannot unlock it themselves, but they may be able to submit or recheck an official ownership request. The final decision would still come from Apple’s validation team, and a previous denial may mean they will not reopen it.
If the iPad is still marked as lost or tied to the compromised account, the situation is unfortunately very difficult. Apple generally will not remove Activation Lock based only on an explanation of what happened, and an Apple Store cannot simply override it. You should report the account and financial theft to law enforcement and keep the report with your documentation, but there may not be a guaranteed technical solution.
Related Questions
Lenovo Thinkpad Stuck In Update Loop Install FilterDriverU2_Reload