Contract Fraud, Not Theft: How Scammed Brand-New Phones Reach the Used Market
· TR Vertriebs GmbH
Criminals hijack mobile accounts, order brand-new flagship phones on someone else's bill, and resell them fast – often before the IMEI ever reaches a blacklist. What private buyers, sellers, and dealers should check as well.
A few weeks after the new iPhone 18 lineup launched in September 2026, the same familiar pattern has resurfaced on classifieds sites: unusually cheap, supposedly sealed flagship phones from private sellers, barely weeks after the devices hit stores. Not every one of these phones comes from a classic theft. A growing share comes from contract fraud at the carrier level – and that changes what buyers need to check before handing over money.
The scheme almost always runs the same way. Fraudsters call a customer, pose as staff from the carrier or an authorized retailer, and offer a free upgrade to the latest flagship. During the call they ask for the one-time SMS code, use it to log into the customer's account, and order the new device on the victim's bill. In the final step, either the delivery address is quietly changed to one the scammer controls, or the victim is talked into forwarding the freshly arrived parcel.
A September 2026 case study from the GSMA and Vodafone UK shows how large the problem has grown. UK carriers reportedly lose over £200 million a year to mobile phone fraud, most of it through exactly this kind of upgrade scam. Reported incidents rose 650 percent in the first half of 2025, and the study counted roughly 26,000 hijacked customer accounts in early 2025. The study says the stolen devices are often resold quickly into Southeast Asia – though a share demonstrably stays in the domestic used market.
Comparable cases are surfacing in Germany too, even without matching aggregate figures yet. German police recently warned about so-called contract agents who talk victims into signing a mobile contract for a promised commission, then keep the expensive device for themselves. In Stockach, Baden-Württemberg, police are investigating former staff at a Vodafone shop who reportedly had customers sign two contracts instead of one and kept the second handset to resell. O2 customer forums also show a growing number of reports about contracts and devices opened in someone's name without their knowledge.
For buyers, the key difference from classic phone theft is timing: when does an IMEI actually get blacklisted? A blacklist entry only appears after the carrier or police recognize the fraud and report the number – and it can take weeks before a device ordered through an account takeover is even flagged as fraudulent. A clean blacklist result at handover is therefore not proof that everything is fine with the device. It only shows that nobody has reported the IMEI yet.
An IMEI check is still the right first step: it shows the current blacklist status, carrier lock, and, for many models, the activation-lock or FMI status at the moment you run it – which is exactly why it is worth doing before any used purchase. What it cannot show, by nature, is an order placed days or weeks earlier through an account takeover that hasn't been reported yet. How liability for a good-faith buyer plays out differs by case, and our article "Gebrauchtes Handy gekauft — und es war gestohlen: Was Käufern jetzt rechtlich droht" (in German) breaks that down in more detail.
For private purchases, a few extra checks go a long way: ask for the original invoice in the seller's name, match the ID shown at handover against that name, be wary of any request for payment in advance of viewing the device, and look twice at suspiciously cheap, sealed flagship phones appearing just weeks after a major launch. Meeting in person at a busy public place and using the platform's own buyer-protection payment option offer more protection than a bank transfer made in advance.
Anyone with their own mobile contract can protect it with very little effort. A one-time SMS or call code belongs to no one claiming to be carrier staff – not even for a tempting free upgrade. An extra account PIN or security layer with the carrier, plus a regular check of your own contract portal for unfamiliar orders, closes the entry point most of these cases rely on.
For buyback and refurbishing operations, this belongs in intake screening: an unusually high number of brand-new units of a just-launched flagship from a single source is a warning sign that goes beyond a plain blacklist check. Matching the invoice to the supplier's identity and documenting provenance belong in the workflow just as much as an API-based IMEI check, as described in our article "IMEI-Prüfung fest im Ankaufsprozess: Prozessdesign für den Einkauf" (in German). IMEI Safe lets you check the IMEI before any buyback or purchase – but for private buyers, it does not replace looking closely at the invoice, identity, and seller behavior.