I've been to a concert three weeks ago and found a Moto G5S Plus there.
I've waited for the owner to call - but they didn't.
The phone is not so locked. It has a (stock) screen lock, but it doesn't seem to be encrypted - I can reboot it and the apps start.
All I can see in the lock screen are app notifications, but with their content hidden.
I managed to check that there's a Google Play Services notification stating the Google account of the owner, but I've sent an email there without reply. My guess is they've just created the Google account for the phone, but use a different email address (if they check any, at all).
I see WhatsApp, Facebook, Twitter, Behance, Messages & Uber notifications (there may be some others, I don't recall right now), but with their content hidden.
How can I unlock the phone to be able to access WhatsApp/Messages/Contacts to contact someone who can contact me with the owner?
I've tried calling their service provider, but they weren't able to find the IMEI on their users database. They've suggested me on the phone to try going to an actual store since they may have better info, but I didn't have the chance yet.
The phone doesn't have an SD card - so no luck trying to get something out of there.
There are no Emergency contacts set up.
I can access the camera without unlocking the phone. That allowed me to take a picture to a message stating a way to contact me, just in case there was any cloud backup setup - but I have not been contacted yet.
I was able to connect to a WiFi using the Camera to read a QR code. I wasn't able to connect to a password-protected WiFi network via the WiFi menu, but I could using the QR code. May there be any other QR action that I could exploit to help me?
It's a Movistar phone, from Argentina, if that makes any difference - but I'm expecting any workaround at the phone/OS level.
From the recovery mode, I could get the Android version is 8.1.0/OPS28.65-36-14/63857
. It also says motorola/sanders_retail/sanders
, if that helps.
I've just found in HIBP that the user e-mail was part of the Canva breach - but I couldn't find the actual leaked data on a really quick Google search.
Connecting via USB, adb devices
won't show it. I managed to get fastboot devices
to list the phone when I reboot it and stay at the bootloader - but I haven't found how that may help.
I also tried putting a working SIM card in the phone and calling it from another phone. The idea was to use the conference call option to try to access the phone's contact list. Even though the phone said it had cellular signal, the call didn't make it - so it may already be blocked at the telco level.
I'd appreciate any suggestions to try.
(Just in case: I really want to return it back to the owner. If I was trying to keep it for myself, I'd just factory reset it and call it a day. I also don't intend to violate their privacy - just to contact them)