A stolen phone can connect several parts of your financial identity: banking apps, email, SMS codes, mobile wallets, saved passwords, and identity documents. Act from a trusted device and use official contact details from bank cards, statements, or the provider’s verified website.
Contact financial providers immediately
Tell each bank or payment provider that the registered phone is missing. Ask it to block or de-register the mobile-banking installation, review recent transactions, and explain whether cards or transfers need temporary restrictions. Report unauthorized activity as soon as possible because deadlines and protections vary by provider and country.
Secure the email account connected to banking
Email can be used to reset financial passwords. Review sessions, forwarding rules, recovery methods, and connected apps. Change the password if the phone may have been unlocked or the credential exposed. Sign out unknown sessions and protect the email account with a strong authentication method on a separate trusted device.
Suspend the SIM and prevent number transfers
Call the mobile carrier and suspend the SIM or eSIM. Add or reset the carrier account PIN and ask for protection against unauthorized porting. SMS alone is vulnerable when control of the telephone number changes, so move important accounts to passkeys, a hardware key, or an authenticator on a secure replacement device when supported.
Remove mobile-wallet access
Use the wallet provider’s official account controls or contact the card issuer to suspend cards provisioned to the missing phone. Removing a card from a digital wallet does not necessarily cancel the physical card; ask the issuer what action is appropriate. Continue monitoring pending and completed transactions.
Use Android recovery controls
Try to locate and secure the phone with Google’s official service and any enabled manufacturer recovery service. Preserve screenshots and timestamps. If sensitive financial or identity data is at serious risk, a remote erase may be appropriate, although it can end further location updates.
Beware of follow-up phishing
Attackers may send convincing messages saying the phone was found or that a bank account must be verified. Do not open sign-in links from unexpected texts or emails. Navigate independently to the official app or website. Never disclose a PIN, password, one-time code, SafeMyPhone recovery key, or device unlock code.
Document the incident
Record the theft time, bank reference numbers, carrier case number, IMEI, disputed transactions, location timestamps, and security actions taken. Make a police report when appropriate. SafeMyPhone alerts can supplement this record if the app was configured before the theft, but they do not replace the bank, carrier, official recovery tools, or authorities.