LOST OR STOLEN DEVICE RESPONSE: SECURE WHAT THE DEVICE COULD ACCESS
A lost device is not only a hardware problem. It may provide access to accounts, authentication methods, messages, files and financial applications.
THE CORE PRINCIPLE
RESPOND TO THE ACCESS THE DEVICE PROVIDED, NOT JUST THE DEVICE ITSELF.
01 · LOCK OR PROTECT THE DEVICE
Use the device manufacturer's official find-device or management controls where available.
02 · IDENTIFY IMPORTANT ACCOUNTS
Consider which email, financial, social, work and other accounts were accessible from the device.
03 · SECURE IMPORTANT ACCOUNTS
Use trusted official channels to change credentials, terminate sessions or follow account-recovery procedures where appropriate.
04 · REVIEW MFA AND RECOVERY
If the device was used for authentication or recovery, follow the service's official process to maintain secure access.
05 · CONTACT RELEVANT PROVIDERS
If the device or SIM affects banking, mobile services or other high-impact services, contact the relevant provider through a trusted channel.
06 · WATCH FOR FOLLOW-UP SCAMS
A person claiming to have found the device may attempt to obtain a passcode, verification code or other secret. Verify any claim independently.
EXAMPLE
After losing your phone, you receive a message saying someone found it and needs the verification code sent to your number to return it. Do not provide the code merely because the story sounds helpful. Secure the account and device through official channels.
WHY THIS MATTERS
The physical loss of a device can become an account-security incident when the device provides access to important services.