Not sure if 9to5Mac is allowed here, but you are now aware reseller scum, “repair shops”, thieves and criminals (all of which are redundant) using password phishing kits and fake receipts to access iCloud-locked iPhones
https://9to5mac.com/2019/02/06/hack-icloud-locked-iphones/
https://9to5mac.com/2019/02/06/hack-icloud-locked-iphones/