Apple’s "Find My" protocol allows lost devices, such as Airtags, to relay their location to their owners via a network of over a billion active Apple devices. This presents a powerful capability for owners of these devices, but may also be a tool for malicious actors to cheaply and effectively track unknowing targets. Apple has introduced a feature known as “item safety alerts” to prevent Airtags from being used this way. We demonstrate that it is possible to create a custom device, with similar features to an Airtag in terms of cost, size and battery life, which can participate in Apple’s "Find My" network and be tracked via it, while not triggering any item safety alerts. This implies that Apple’s protection mechanism is insufficient. We suggest natural mitigations for two of our malicious tracker techniques but note that the third would require substantially altering the "Find My" protocol to defend against.