← Back to Knowledge Center
KNOWLEDGE CENTER

Lost or Stolen Phone: What to Do Before Someone Else Uses It

Devices & Phone Securityen-NG
BEFORE YOU BEGIN

Understand the issue before you decide what to do.

This lesson is designed to explain the subject in practical terms so that you can understand not only what the risk is, but why it matters, how it can appear in real situations and what you can do to reduce your exposure.

Read the explanation carefully before acting on a suspicious message, request, transaction, account notification or other security-related situation.

FULL LESSON

Understanding the subject

Take your time with this explanation. The goal is not simply to recognise a warning sign, but to understand what is happening and make a safer decision when you encounter it.

A lost or stolen phone can expose messages, accounts, authentication methods, contacts, files and payment applications. Acting promptly can reduce the potential impact.

STEP 1 — REPORT AND ASSESS Record when and where the phone was lost or stolen and identify what it could access.

STEP 2 — USE AVAILABLE DEVICE CONTROLS Where supported, use the official device-management or find-device service to lock, locate or protect the phone.

STEP 3 — SECURE IMPORTANT ACCOUNTS Review important accounts that were signed in on the device. Terminate sessions or secure accounts where appropriate.

STEP 4 — REVIEW AUTHENTICATION AND RECOVERY If the phone was used for MFA or account recovery, follow the official service recovery process and review those methods.

STEP 5 — CONTACT RELEVANT PROVIDERS If the device or SIM may affect financial services or mobile access, contact the appropriate provider through a trusted official channel.

WHY THIS MATTERS A stolen phone can be an access path into multiple accounts even when the attacker does not know every password.

VERIFY BEFORE YOU TRUST. Be cautious of unexpected messages claiming to help recover a lost device.

APPLY WHAT YOU LEARNED

Turn understanding into a security habit.

Knowing the definition is only the beginning. The real value of cybersecurity education is being able to recognise the situation and make a safer decision when it happens to you.

How should you use what you learned?

Understanding a cybersecurity concept is useful only when it changes how you make decisions. When you encounter a similar situation in real life, slow down and identify what is being requested before you respond.

Ask yourself who is making the request, what they are asking you to do, what information or access is involved, and whether the request can be independently verified.

Do not allow urgency, fear, authority, familiarity or the promise of a reward to replace independent verification.

What if I still do not understand something?

Cybersecurity concepts can sometimes involve technical terms or situations that are difficult to interpret from a single lesson. If something is unclear, do not guess when the decision could affect your money, identity, account access, device or sensitive information.

You can seek further guidance through the consultancy channel. Explain the situation clearly, but never include passwords, OTPs, PINs, recovery phrases, private keys or other authentication secrets.

Use the consultancy form →

THE VERIFY BEFORE YOU TRUST PRINCIPLEVERIFY BEFORE YOU TRUST.

A convincing message, familiar name, professional appearance or urgent request is not proof of legitimacy. Verify the important facts independently before taking an action that could be difficult to reverse.