Apple had introduced this feature in 2013 to safeguard peoples information stored on their iPhones.
The iCloud account can only be removed by entering the Apple ID password.
Additionally, a few hackers also reprogram stolen iPhones with a new IMEI.
Even some unnamed repair companies have become actual customers of companies that illegally reset and reactivate the iCloud-locked iPhone.
While some of these phones are almost certainly stolen, many of them are not.
Also, ensure that you have enabled two-step authentication on your iCloud account.
source: www.techworm.net