Cut off the phone's access paths
- Mark the device lost from a trusted device and preserve tracking if it is safe to do so.
- Ask the carrier to suspend the SIM or eSIM and protect the carrier account.
- Review wallet tokens, email recovery settings and unfamiliar account sessions.
Follow the access path outward from the stolen phone
A phone can expose more than the handset. Close each route in the order it can unlock the next one.
Device
Use the maker's official lost-device service and keep tracking only when doing so is safe.
Mobile number
Ask the carrier to suspend the SIM or eSIM and protect the carrier account from another change.
Recovery accounts
Secure primary email, wallet tokens and signed-in financial apps from a trusted device.
Protect the device, number and signed-in accounts
Protect the account that controls the phone
Use the device maker's official lost-device service from a trusted device. Mark it lost, but avoid erasing it until you understand whether erasure ends tracking.
Call the mobile carrier
Ask the carrier to suspend the SIM and add an account PIN. A stolen number can be used for password resets even when the handset is locked.
Review wallet and sessions
Contact card issuers about wallet tokens and check email, banking and social accounts for unfamiliar sessions. Do not follow recovery links sent by strangers claiming to have the phone.
Erase only after understanding the tradeoff
A remote erase protects stored data but may stop location or recovery features. Read the device maker's current instructions and consider whether personal safety, recoverability or exposed data should control the timing.
Ignore recovery bait
A message saying your phone was found may lead to a fake sign-in page. Open the official lost-device service yourself. Never remove the device from your account or share a screen-lock code because a stranger asks.
Map every route the phone could still open
A stolen phone can expose the handset, mobile number, recovery inbox and signed-in apps through different paths. Check them separately.
- Device control
- Record when the device was marked lost, whether tracking remains available and whether a remote erase is pending. Do not travel to an unsafe location or confront anyone because a map shows a position.
- Number control
- Ask the carrier whether the SIM or eSIM was suspended, whether a port or replacement occurred and what protection now applies to the carrier account. Save the case reference and restoration time.
- Wallet control
- List the payment cards or passes believed to be in the wallet and ask each relevant issuer about its device token. Replacing a handset or SIM does not by itself confirm that every payment token is disabled.
- Recovery control
- Review primary email, cloud, banking and social accounts for unknown sessions, changed recovery details and reset activity during the loss window. Revoke access before relying on a password change alone.
Keep recovery messages from the device maker and carrier, but open their services independently. A message claiming the phone was found can be an attempt to collect a passcode or account login.
If the incident reaches another account or record
A sudden loss of mobile service can also indicate a SIM-swap or number-port attack.
If the device exposed your primary mailbox, follow the hacked-email recovery sequence before trusting password resets.
Record the device and wallet response
- Write down the device model, phone number, serial or IMEI if available from your records.
- List the wallet cards, banking apps and primary email account accessible from the device.
- Record the time of carrier suspension, remote lock or erase request, and each card token removed.
Questions that come up during containment
Can a thief use contactless payment while the phone is locked?
Wallet protections vary by device and configuration. Tell card issuers the device was stolen and ask whether its wallet tokens should be suspended.
Should I chase the phone's map location?
No. Do not confront anyone or enter an unsafe location. Give location information to local authorities when appropriate.
Processes, rights and deadlines depend on your location, provider and policy. Use the relevant official service for your jurisdiction.