Every few months a post goes around claiming your iPhone has a hidden setting that catches thieves. Most of the time it is nonsense. This one is not.
The version doing the rounds this week comes from X user @PhoenixQwin, and the claim is specific: set up a Shortcuts automation that fires the moment a charger is connected, and your iPhone will quietly take a photo with the front camera and email you its location. If someone steals your phone and eventually plugs it in, you get a face and a map pin.
That is real. Everything it describes is built into the Shortcuts app, no third party service, no subscription. What the viral posts leave out is the price you pay for it, and it is not money.
The short version
- The trap is a Personal Automation in Shortcuts, triggered by Charger Is Connected and set to Run Immediately
- It can turn Airplane Mode off, turn cellular data on, take a front camera photo, grab your location and email both to you
- It fires every time you charge your own phone, which for most people is once or twice a day, forever
- It only helps if the thief actually plugs the phone in, keeps a SIM in it and does not wipe it first
- Apple’s own Stolen Device Protection and Find My do the heavy lifting, and they work whether or not anyone charges anything
- Treat the shortcut as a bonus lottery ticket, not as your plan
What the automation is actually doing
Shortcuts has had a Charger trigger for years. It exists so people can do sensible things like turning on Do Not Disturb when they dock the phone at night. Nothing about it was designed for security, which is part of why this works: a thief has no reason to expect it and no obvious way to see it.
When the trigger fires, the automation runs a list of actions in order. The useful chain looks like this. Turn Airplane Mode off, in case the phone was switched to it. Turn Cellular Data on, so there is a route to the internet even without Wi-Fi. Take a photo with the front camera, with the preview suppressed so nothing appears on screen. Get the current location. Then send all of it to an email address you control.
The whole thing takes a couple of seconds and produces no sound, no flash and no visible confirmation beyond a small banner that you can switch off in the automation settings.
Building it, step by step
| Step | What to tap | Why it matters |
|---|---|---|
| 1 | Shortcuts app, Automation tab, plus button | Personal automations live here, separate from saved shortcuts |
| 2 | Choose Charger, then Is Connected | This is the only trigger a thief is likely to pull without thinking |
| 3 | Select Run Immediately, turn off Notify When Run | Without this the phone asks permission first, which defeats the point |
| 4 | Add Set Airplane Mode to Off and Set Cellular Data to On | Restores a connection if the phone was cut off from the network |
| 5 | Add Take Photo, set camera to Front, preview off | Captures whoever is holding the phone, silently |
| 6 | Add Get Current Location | Gives you coordinates independent of Find My |
| 7 | Add Send Email to an address that is not on the phone | If the thief gets into your mail app, you still have a copy elsewhere |
Step seven is the one people get wrong. Sending the email to the same account that is signed in on the stolen iPhone is close to pointless. Use a second address, ideally one you can open from a laptop or a family member’s phone.
The catch, which is bigger than it sounds
An automation cannot tell the difference between a thief plugging in your phone and you plugging in your phone. It runs the same seven actions either way.
So if you charge overnight and top up in the car, you are looking at roughly seven hundred front camera photos a year, most of them taken at an angle no human being has ever chosen voluntarily. Your camera roll fills with pictures of your ceiling, your chin and whatever you happened to be doing at 11pm. Your secondary inbox fills with location emails from your own house.
There are ways to soften that. You can drop the Save To Photo Album action and send the image only, so nothing accumulates on the device. You can point the emails at a dedicated address with a filter that buries them in a folder. You can add a condition so the automation only completes when the phone is somewhere other than home, using a Get Current Location check and an If block, although that adds complexity and one more thing that can silently break.
The honest framing is this. You are running a small daily tax on your storage and your attention, in exchange for a chance at evidence in a scenario that may never happen, and that only pays out if the thief behaves in a specific way.
What Apple already built, and why it matters more
Before you spend twenty minutes in Shortcuts, it is worth being clear about which layer does what. The shortcut recovers evidence. Apple’s features protect your accounts and your data, which is the part that actually costs people money.
| Layer | What it protects | Works if the phone is offline? |
|---|---|---|
| Find My | Locating the device, remote lock, remote erase | Yes, through the Find My network |
| Activation Lock | Resale value. Nobody can reactivate it without your password | Yes, it is tied to your Apple Account |
| Stolen Device Protection | Your Apple Account, saved passwords, payment methods | Yes, the delay is enforced on device |
| The charger shortcut | A photo and a location, nothing else | No, it needs a connection to send |
Stolen Device Protection is the one most people still have switched off, and it is the one that matters most. It exists because of a specific crime pattern: a thief watches you type your passcode in a bar, then takes the phone. With the passcode alone, they used to be able to change your Apple Account password, lock you out and drain saved cards.
With the feature on, sensitive changes made away from your familiar locations require Face ID or Touch ID, then a one hour wait, then Face ID or Touch ID again. A thief with your passcode and no face gets nowhere. It lives in Settings under Face ID and Passcode, and it takes one toggle.
Find My is the other non negotiable, and it keeps working even when the handset is off or has no SIM, which is the part most people do not realise. We went into that in detail in what Find My can and cannot do once the battery is gone, and it is worth understanding before you rely on a charger trigger instead.
The odds you are actually playing
It helps to know what happens to stolen phones. In the UK, more than two thousand handsets are reported stolen every day, and street snatches alone were running at roughly two hundred a day in recent Home Office figures. Recovery is the grim part: somewhere around a quarter of stolen smartphones are ever recovered, and only about one in ten finds its way back to the person who owned it.
Organised phone theft is not a teenager keeping your handset. It is a pipeline. Devices are bagged, taken offline quickly, and either shipped abroad or stripped for parts precisely because Activation Lock makes a locked iPhone worthless to resell intact. A phone in that pipeline is rarely charged in a well lit room by someone facing the front camera.
The scenario where the shortcut wins is the opportunistic one. A phone left on a bar, a device lifted from a gym locker, a handset taken by someone who genuinely thinks they can just use it. Those people do charge phones, and they do sit in front of them. It is a smaller slice of theft, but it is not zero, and the evidence is genuinely useful to police when it lands.
What you should not do is act on it yourself. A photo and a map pin is information for a crime reference number, not an invitation to knock on a door. Location data has also been wrong often enough to send people to entirely innocent addresses, something we covered when Find My kept pointing strangers at the wrong house.
If your iPhone is taken tonight
- Mark it as Lost in Find My from another device or iCloud.com. This locks it, suspends cards and displays a contact message
- Change your Apple Account password from a device you still control, before anything else
- Call your carrier and have the SIM blocked and the IMEI blacklisted
- Report it to police and get a crime reference number, which your insurer will ask for
- Check your email rules for forwarding filters a thief may have added if they got in
- Erase remotely only when you have given up on recovery, because an erased phone stops reporting its location
That last point catches people out. Wiping the device feels like the safe, decisive move, and it does protect your data, but it also ends any chance of tracking it. If Stolen Device Protection was on and your passcode is not compromised, you can usually afford to wait a day before pulling that trigger.
So should you build it
If you enjoy tinkering, yes, with the photo saved only to the email rather than the camera roll. It costs you nothing but a bit of inbox noise, and on the small chance a casual thief plugs it in, you get something concrete to hand over.
If you were going to build it instead of turning on Stolen Device Protection, no. That is backwards. The shortcut might get you a blurry photo of someone’s forehead. The toggle stops a stranger who watched you type your passcode from emptying your accounts, and it works whether or not they ever find a charger.
Apple has been quietly adding controls like this for years, and it keeps burying them under names nobody searches for. The pattern repeats across iOS, right down to the Find My setting Apple insists is for surprise parties. The features are there. They are just never the thing that goes viral.
Sources and further reading
- UNILAD Tech: iPhone thief trap setting that photographs whoever steals your device and emails their location
- Apple Support: Use Stolen Device Protection on iPhone
- Apple Support: Activation Lock for iPhone and iPad
- Apple Support: If your iPhone or iPad was stolen
- House of Commons Library: Mobile phone thefts
- iDownloadBlog: How to remotely take pictures and get the location of your iPhone thief
