What to Do in the First Hour After Your Phone Is Stolen

You reach for your pocket on the train and it is empty. Within minutes, whoever has your phone may be trying to reset your email, open your banking app or read the codes your accounts send by text. When your phone is stolen, the first hour matters more than anything you do the following week.

This is the checklist I give to friends and small business clients. It assumes you are standing somewhere without your phone, possibly panicking, and need clear steps in the right order. Print it or save it somewhere you can reach from another device.

Step one when your phone is stolen: find a second device

You need a laptop, a tablet or a borrowed phone. Ask a friend, a colleague or a shop assistant. Use a private or incognito browser window if the device is not yours, and sign out of everything when you finish.

If you can, note the time and where you last had the phone. You will need this for the police report and for your carrier.

Lock and locate the phone in the first 15 minutes

Both major phone platforms let you lock a device remotely. Do this before anything else.

iPhone

1. Go to the Find My page on iCloud and sign in with your Apple Account.
2. Select your phone and choose "Mark as Lost". This locks it with your passcode, suspends Apple Pay cards and shows a message with a contact number on the lock screen.
3. Check the map, but do not go to the location yourself. Pass it to the police.

Android

1. Open Google's Find My Device page and sign in with the Google account used on the phone.
2. Choose "Secure device" to lock it and display a message.
3. Note the last known location and battery level.

Do not erase the phone straight away unless you are sure it is gone for good or it holds very sensitive data. Erasing usually stops location tracking. A locked phone can still be found, and you can erase it later from the same page.

Call your carrier to block the SIM

This step is the one people forget, and it is critical. Your SIM card receives one-time login codes by text. A thief who moves your SIM into another phone can use those codes to reset email, banking and social accounts.

Call your mobile carrier from another phone and ask them to block the SIM and put a note on the account. Most carriers can issue a replacement SIM or eSIM within a day. While on the call, ask whether they offer a port-out lock or account PIN, which stops anyone moving your number to a new carrier.

Many carriers can also block the handset itself using its IMEI number, which makes it far less useful to resell. You will find the IMEI on the original box or in your Apple or Google account device list.

Secure your most important accounts

Work through these in order, from the second device. The goal is to change passwords and sign the stolen phone out before anyone can use it.

1. Your main email. Change the password, then use "sign out of all other sessions". Email is the key that resets everything else.
2. Apple Account or Google account. Change the password and remove the stolen phone from your list of trusted devices.
3. Banking and payment apps. Call your bank's fraud line. They can freeze mobile banking and cards linked to the phone in minutes.
4. Password manager. Change the master password and sign out other sessions.
5. Messaging and social apps. WhatsApp, Instagram and others allow remote logout from settings on another device or through their help pages.

If you have been putting off longer passwords, now is the time. Our guide to creating a strong passphrase you can remember takes about ten minutes and is easy to type on a borrowed keyboard.

Why a short passcode is the real weakness

The common advice is to focus on tracking apps and remote wipe. Those help, but they miss how many phone thefts actually go. A widely reported pattern involves thieves watching someone type a four-digit passcode in a bar or on a train, then stealing the phone. With the passcode, they can change the Apple Account password, turn off Find My and access saved passwords within minutes.

So I would argue the most important protection is set up before anything goes wrong. Use a six-digit passcode at minimum, or better, an alphanumeric one. Cover the screen when you type it in public. On iPhone, turn on Stolen Device Protection, which requires Face ID and a one-hour delay for sensitive changes when you are away from familiar places. On Android, enable Theft Detection Lock and Identity Check where available.

These settings take five minutes and close the gap that remote tracking cannot.

For small businesses, add one more step. If the phone had work email, a company chat app or an authenticator for shared accounts, tell whoever manages IT immediately. They can revoke the device's access from the admin console and check for unusual logins in the last few hours.

Report it and keep a record

File a police report, online if your local force allows it. You will usually need the IMEI, the time and place of the theft and a short description. Keep the reference number. Your insurer, bank and carrier may all ask for it.

Write a simple log of what you changed and when: passwords, calls made, reference numbers. If fraud shows up later, this timeline helps you dispute it.

Recovering afterwards

Once you have a replacement phone, restore from your cloud backup, then review your accounts for unfamiliar logins, new forwarding rules in your email and new devices on your bank app. Update the new phone's software straight away; our guide on why software updates matter explains why a fresh device is often already behind.

Finally, use this as a chance to fix the basics. Two-factor authentication through an app or passkey rather than text, a backup of your recovery codes and a strong passcode cover most of what went wrong. They are part of the handful of security habits that matter most.

Frequently asked questions

Can a thief use my phone if it is locked?

Not easily, if you have a strong passcode and the phone is marked as lost. Modern phones encrypt their data, and activation locks stop them being set up again without your account. The bigger risk is a removed SIM card, which is why blocking it quickly matters.

Should I erase my stolen phone right away?

Usually, lock it first and erase it only once you are fairly sure it will not be recovered, or if it holds very sensitive information. Erasing generally stops location tracking. On iPhone, an erased phone stays activation locked to your account.

Can police track a stolen phone with the IMEI?

Carriers can block a phone by its IMEI so it cannot be used on their networks, and police may request location data in some cases. In practice, recovery is uncommon, so focus on securing your accounts. Always give the IMEI in your report.