Act in the right order
The first minutes are about stopping access, not recovering the physical device at any cost. Move to a safe place, use another trusted phone or computer and begin with the accounts that can reset everything else.
Do not confront a suspected thief. Keep records of calls, reference numbers and the time each action was completed.
- Secure your primary email and password manager.
- Lock or erase the phone remotely.
- Block the SIM with the mobile network.
- Contact banks and payment services.
- Secure WhatsApp and social accounts.
- Report the loss and preserve evidence.
Lock the device remotely
Use Google Find My Device for Android or Find My for iPhone. Mark the device as lost, display a safe contact number and review its last known location. Remote erase is appropriate when sensitive data is at risk and recovery is unlikely.
An erase command may only complete when the device reconnects. Changing the Google or Apple password too early can sometimes affect tracking, so review the platform’s instructions before making irreversible changes.
Block the SIM and prepare for replacement
Contact the network through an official channel and request a block. Ask what identity documents are needed for a replacement SIM. Do not trust a phone number or social-media account simply because it uses the network’s logo.
A SIM block reduces calls and SMS abuse, but it does not sign the phone out of apps that already have internet access.
Protect financial accounts
Call each bank or payment provider using the number on its official website, bank card or verified application listing. Ask for mobile and online banking access to be suspended if necessary. Change credentials from a clean device and review recent transactions.
Never share a PIN, password or one-time code with someone who claims to be helping you block the account.
Secure email, WhatsApp and social accounts
Email is a recovery channel for many other services. Change the password, sign out unknown sessions and confirm the recovery phone and email. For WhatsApp, register the number on a replacement SIM and enable two-step verification.
Review active sessions on social networks and remove the stolen device. Tell close contacts not to trust unusual requests for money or codes.
Report and document the incident
Make a police report when appropriate, especially when insurance, a bank investigation or identity abuse may be involved. Record the IMEI from the device box, receipt or account page, but do not publish it publicly.
Keep screenshots of account alerts, transaction notifications and support reference numbers.
After the immediate crisis
Replace weak or reused passwords, regenerate recovery codes and review applications that had access to documents or cloud storage. Consider a credit or identity review if the phone contained identification documents.
On the replacement phone, enable a strong screen lock, automatic updates, remote finding, encrypted backups and SIM protection where available.
First 15 minutes: secure access, not the physical phone
Move to a safe place and use another trusted device. Call your number once if the phone may simply be nearby, but do not arrange a private meeting with someone claiming to have it. Use Android’s Find My Device or Apple’s Find My service to mark it lost, display a safe contact number and lock it remotely.
If the phone is unlocked or the thief may know your PIN, treat the event as an account compromise. Start with the email account that controls password resets, then banking, mobile network, messaging and social accounts.
Contact the mobile network
Ask the network to block the SIM and explain the replacement process. Record the time, ticket number and agent name where available. A SIM block reduces the risk of calls, SMS codes and mobile-money activity, but it does not secure apps that remain logged in over Wi-Fi.
Secure email and password recovery
Change the password of the main email account from a trusted device. Review signed-in devices, recovery phone numbers, forwarding rules and recent security activity. Remove the stolen phone’s session where the provider allows it.
Then change passwords for high-risk accounts that did not use unique credentials. Avoid changing dozens of low-risk passwords before securing the email and financial accounts that can reset the others.
Protect financial accounts
Contact banks and financial services through official phone numbers, websites or branches. Ask them to restrict mobile-app access, card-not-present activity or transfers where appropriate. Do not rely only on changing an app PIN because the device may still hold an active session.
Secure messaging and social accounts
Register WhatsApp on a replacement SIM when available, review linked devices and turn on two-step verification. For other services, remove the stolen device from active sessions. Tell close contacts that the phone was stolen so they can ignore urgent money requests or suspicious links.
Preserve evidence
Keep the IMEI, serial number, purchase record, remote-location screenshots, police report and support ticket numbers. Do not post live location publicly. Give location information to the appropriate authorities and avoid confronting a suspect.
Should you erase the phone?
Remote erasure protects stored data but can end some tracking options. Lock the device first, secure accounts and consider whether location information is still useful. Erase it when the risk to personal or business data is greater than the chance of recovery.
Recovery checklist for the next 48 hours
- Replace the SIM through the network’s official process.
- Restore accounts on a trusted device.
- Review bank and card activity.
- Check email forwarding and recovery settings.
- Review social and messaging sessions.
- Change reused passwords.
- Warn contacts about impersonation attempts.
- Keep monitoring for SIM-swap or password-reset messages.
Frequently asked questions
Can a thief access apps without my PIN?
A strong lock helps, but notifications, saved sessions, weak biometric settings, SIM access and recovery messages can still create risk. Act quickly.
Should I call every bank?
Prioritise institutions with active apps, cards, wallets or saved credentials on the phone. Use only verified support channels.
Can the IMEI alone recover the phone?
The IMEI is useful for identification and network or police reports, but it does not guarantee recovery.
Final checklist
- Apply the steps that match your phone, account or organisation.
- Confirm the result before deleting data, resetting a device or changing an account.
- Keep recovery codes and support contacts somewhere other than the affected phone.
