My gf just got her phone stolen and listed my number when she put it into lost mode. I got a scam text pretending to be Apple saying her iPhone had been found and directing to a link. The link then asked for the passcode of the phone and then redirected to a fake Apple ID sign-in page.
I’m sure enough people fall for this to still make it worth it.