I’m on latest iOS version. Could they be using the contact tracing api in some malicious way?