Phone Stolen? What to Do in the First Hour to Protect Your Accounts and Money
Key Takeaways
Your phone isn't just a phone anymore. It's the key to your email, your bank, your passwords, and every two-factor authentication code that stands between a thief and your accounts. When it goes missing, the clock starts immediately.
The good news is that speed matters more than tech skills here. Most of the damage from a stolen phone happens because people freeze or assume the situation is hopeless. It isn't. Here's exactly what to do, in order, during that critical first hour.
Why a stolen phone is a financial emergency
A thief with your unlocked phone can do more damage in 30 minutes than most people realize. They can open your banking app (if it's already logged in), trigger password resets sent via text, access your email to approve those resets, and drain a linked payment method before you've even filed a police report.
Americans reported losing $15.9 billion to fraud in 2025, up from $12.5 billion in 2024, according to FTC testimony to Congress. Identity theft was the second most-reported category in 2024, with about 1.1 million reports, according to the FTC's 2024 Data Book.
That's the real risk. Not just losing the device, but losing access to the accounts attached to it.
Step 1: Lock or erase your device remotely
The very first thing to do is cut off access to the phone itself.
For iPhone: Go to iCloud.com/find on any browser, sign in with your Apple Account, select your device, and choose "Mark as Lost" to lock it with a passcode and display a contact message. Lost Mode also suspends Apple Pay cards. If you're certain it's gone for good, select "Erase This Device." Activation Lock stays on as long as Find My was on and you don't remove the device from Find My, which makes the phone much harder to resell. Apple Support has the full walkthrough.
For Android: Go to android.com/find, sign in with your Google account, and select your device. From there you can lock it, display a message on-screen, or erase it entirely using Find Hub. The device has to be on, online, and signed in to your Google account for this to work. If Remote Lock is set up on your phone, you can also lock it at android.com/lock using your phone number. Google's Android Help covers every step.
Don't erase the device yet if there's any chance you'll recover it. Lock it first, erase it later. Once you erase, you lose the ability to track its location.
Step 2: Change your most critical passwords immediately
Assume the thief has access to everything on the device. Work through this list, starting with the accounts that create the most risk if compromised:
- Email. This is the master key. Password resets for almost every other account get sent here. Secure it first.
- Google account or Apple Account. These accounts often have billing information attached and control device backups.
- Banking and payment apps. Your bank, PayPal, Venmo, Cash App, or any app that holds or moves money.
- Social media. Accounts tied to your identity and often used for scams targeting your contacts if taken over.
Use a computer or a trusted friend's device to make these changes. If you use a password manager, this is exactly the moment it earns its place. If you don't, now's a good time to set one up once things are stable.
Step 3: Call your mobile carrier
Contact your carrier to suspend your line and ask them to block the device. Suspending the line stops the thief from making calls or running up charges, and from receiving your texts and two-factor codes on the stolen SIM. Blocking the device makes it harder to use even with another SIM, according to AT&T and T-Mobile.
Separately, lock your carrier account against SIM-swap and port-out fraud, a different attack in which a scammer persuades your carrier to move your number to a new SIM.
You can report a lost or stolen phone to your carrier by phone or online. Customer service numbers:
- AT&T: sign in at att.com, or call from another phone
- T-Mobile: 1-800-937-8997
- Verizon: 1-800-922-0204
When you call, ask them to add a PIN or passphrase to your account, and ask about free account locks: AT&T Wireless Account Lock, Verizon SIM Protection and Number Lock, or T-Mobile SIM Protection and Port Out Protection. These are simple but underused protections.
Step 4: Contact your bank and freeze your cards
Call your bank's fraud line and let them know your phone was stolen. Ask them to:
- Flag your account for suspicious activity
- Temporarily freeze any linked debit or credit cards
- Disable any mobile wallet access (Apple Pay, Google Pay) tied to your account
You don't have to cancel cards permanently right away. A temporary freeze gives you breathing room while you get organized. Banks monitor accounts for fraud, but they can't act if they don't know the phone is gone.
If you use apps like Venmo or Cash App, log into those from another device and review recent activity immediately. Transfer any balance to your bank if something looks off.
Step 5: Review two-factor authentication settings
Once you've secured your main accounts, check where your phone number was being used as a second factor. If a thief can receive texts to your number (especially before you suspended your SIM), they have a window to reset accounts.
Where you can, switch two-factor authentication away from SMS and toward an authenticator app, passkey, or security key on a new device. The FTC says SMS codes are better than nothing, but an authenticator app or security key is safer. Google supports all three, and it's worth checking whether your bank offers a non-SMS option. Apple Account uses codes sent to your trusted devices, with optional security keys.
If your authenticator app was on the stolen phone, use each service's backup codes or account recovery to get back in. For Google, choose Try another way and enter a backup code.
This is also the step where you'll find accounts you forgot you had. A stolen phone has a way of surfacing every app you signed up for over the years.
Step 6: File a police report and document everything
It feels like a formality, but filing a police report matters for two reasons. First, some insurance claims for a stolen phone ask for one, and Apple recommends reporting a stolen iPhone to local police. Second, it creates an official record that can help if fraudulent accounts or charges appear later tied to your identity.
When you file, include your phone's make, model, IMEI or serial number (your carrier can provide the IMEI), and the approximate time and location of the theft.
Keep a note of everything you've done and when. If a bank dispute or identity theft claim comes up later, that timeline becomes evidence.
Step 7: Monitor for signs of account access
After the immediate steps, stay alert over the following days and weeks. Watch for:
- Login alerts from accounts you didn't access
- Password reset emails you didn't request
- Unfamiliar charges on any linked card or account
- Emails from services you don't recognize confirming account creation
If you see anything suspicious, contact the relevant company's fraud team directly. Report identity theft at IdentityTheft.gov, and report scams at reportfraud.ftc.gov.
One layer that helps before any of this happens
Everything in this guide assumes you're reacting after the fact. A few settings you turn on before a theft can make that first hour easier.
- iPhone: Stolen Device Protection (iOS 17.3 and later) requires Face ID or Touch ID, with no passcode fallback, for sensitive actions like using saved passwords or erasing the device when your iPhone is away from familiar places. It also adds a one-hour security delay before changes such as your Apple Account password. It has to be on before the theft. Go to Settings > Face ID & Passcode.
- Android: Theft Protection features such as Remote Lock, Theft Detection Lock, and Offline Device Lock are available on supported phones.
- Both: Keep Find My (iPhone) or Find Hub (Android) turned on, and use a screen lock that's hard to guess.
Guardio doesn't lock or locate a lost phone, but it covers a related risk. Browsing protection on your computer and phone blocks phishing and scam sites before they open and explains why, and Email Security flags phishing emails that get past the Gmail spam filter. Identity Breach Monitoring checks whether your email address or phone number shows up in a known data breach. On iPhone, the Text Message Filter sends malicious texts to junk. No tool catches everything. You can read best practices for keeping your digital assets safe from thieves for more ways to stay ahead.
Conclusion
A stolen phone is stressful, but a calm, ordered response limits most of the damage: lock the device, secure your key accounts, call your carrier and bank, and keep watching for signs of misuse over the following weeks.
Get a free security scan with Guardio today and stay protected from phishing.
FAQs
Can someone access my bank account if my phone is stolen?
Yes, they can. If your banking app is already logged in and your screen lock is bypassed, a thief can access it directly. They can also intercept text-based two-factor authentication codes if your SIM isn't suspended, which lets them reset passwords on accounts that would otherwise be protected. Acting quickly helps limit this window.
Should I erase my phone immediately after it's stolen?
Not right away. Lock it remotely first, which blocks access but keeps tracking active. Only erase it if you're confident you won't recover it, since erasing removes your ability to see the device's location. If you do erase it, Activation Lock (iPhone) or Factory Reset Protection (Android) helps prevent someone else from setting it up, provided Find My was on (iPhone) or a Google account and screen lock were set (Android).
What happens if I don't suspend my SIM?
An active SIM on a stolen phone lets the thief receive calls and texts sent to your number, including two-factor authentication codes they can use to reset your passwords. Suspending your SIM closes that window immediately. Your phone number is preserved and can be reactivated when you get a new device by calling your carrier, though some carriers keep billing during a suspension.
Will my bank cover fraudulent charges made from a stolen phone?
Federal rules limit your liability for unauthorized transactions, but the limits depend on how fast you report. For debit and ATM cards, your loss is generally capped at $50 if you report within two business days of learning of the theft, and up to $500 after that. If you wait more than 60 days after your statement is sent, you could lose all the money taken from the account (FTC). Credit card liability is capped at $50, and some banks offer more protection voluntarily.
How do I know if my identity has been misused after my phone was stolen?
Watch for unexpected credit inquiries, new accounts you didn't open, or unfamiliar charges on your statements. You can request free credit reports, now available weekly, at AnnualCreditReport.com. Consider placing a fraud alert, which you only need to request from one bureau because it notifies the other two, or a credit freeze, which you place with each of the three bureaus (Equifax, Experian, and TransUnion). Both are free. If you confirm identity theft, report it at IdentityTheft.gov.
