What to do when something with an AirTag is stolen

Report the theft, then give the police a timestamped record rather than a live pin: where the item went in the hours afterwards, which address it settled at, and whether it moved again. Do not attend the address or confront anyone yourself. A pattern across days is worth far more than a single point, and a single point is all Find My keeps.

Why should you not go to the address yourself?

Because you would be walking into a stranger's home on the strength of a location that is approximate by design. This is the one piece of advice on this page we would give even if it cost us every reader: report it and stay away.

• A report is the relaying phone's idea of where it was, so a point can land on the wrong building on a terraced street.
• The person at that address may have bought the item, or may have nothing to do with it at all.
• Confronting someone over property is how a property crime turns into a violent one.
• Anything you do at the address is your conduct, and it can matter later regardless of who was in the right about the item.

Give the record to the police and let them decide what to do with it. What happens next varies enormously between forces and countries, and nobody should tell you otherwise.

What does a recorded timeline show that a live pin does not?

Find My shows one position and overwrites it. That answers "where is it now", which is the least useful question after a theft, because the answer changes and the previous answers are gone.

A recorded history answers the questions that actually describe the event: when the item left, which way it went, where it stopped first, how long it stayed, and whether the place it is now is where it has been sitting for three days or somewhere it arrived an hour ago.

• The departure time, which often narrows down when the theft happened far better than you can from memory.
• The route out, including intermediate stops that a single pin never shows.
• A settled address with a duration attached, rather than one coordinate at one moment.
• Repeat visits to the same place across days, which is a pattern rather than a coincidence.
• Whether the item is still moving, which changes how urgent everything is.

What should you hand over?

Something a person can file, not a screenshot of a map. Export the record for the range covering the theft and give them the underlying numbers alongside anything visual.

1. Report the theft through the normal channel first and get whatever reference number you are given.
2. Export the range covering the theft and the days after it: CSV for the raw rows, and the timestamped PDF report if you are on The Move pass or above.
3. Write one short paragraph saying what the item is, when you last had it, and what the record shows, with times.
4. State which timezone the timestamps are in. This is the single most common thing that muddles a handover.
5. Say plainly that the coordinates are approximate and crowd-sourced, and that gaps in the record mean nobody was nearby, not that the item was stationary.
6. Keep the original export unedited. Annotate a copy if you need to, and say which is which.

Overstating the data is the fastest way to have all of it discounted. A record that admits its own limits is harder to argue with than one presented as a GPS trace.

What can the record actually prove?

That a tag was near a device that heard it, at a time, at a place. That is the whole claim, and it is worth being precise about it.

It does not prove who moved the item, that the item was still attached to the tag, or that anyone at a given address knew anything. A tag prised off a bike and dropped in a bin reports faithfully from the bin.

What makes it persuasive anyway is the pattern. One point is a data point; a departure, a route, a stop, and three days of repeat sightings at one address is a description of what happened, and it is difficult to produce by accident.

What if the tag goes quiet after the theft?

It usually means the item is somewhere without Apple devices: a shed, a lock-up, a van, a rural yard. It can also mean the battery went flat, or that the tag was found and removed.

Silence is not the end of the record's usefulness. The points you already have are timestamped observations that do not expire, and the hours immediately after a theft are normally the richest part of the whole timeline.

Export anyway. The timeline is not deleted when a tracking window closes, but an investigation that runs for weeks needs a standalone file you can hand over, and the recording itself does stop: the free window covers 7 days from connect, paid passes longer.