Your Phone Was Just Stolen: The 15-Minute Emergency Action Plan

That sinking feeling when you reach for your pocket and it's empty. You check your bag. Your other pocket. The table. The chair. It's not there. It's gone.

According to the FCC, one in ten smartphone owners in the United States becomes a victim of phone theft, and 68% of stolen phones are never recovered. But the phone itself — a few hundred dollars of hardware — isn't the real loss. The real loss is what's on it and what it's connected to.

Your email. Your banking apps. Your two-factor authentication codes. Your saved passwords. Your Apple Pay or Google Pay with linked credit cards. Your photos. Your private messages. Your social media accounts. Your work email and files. Your crypto wallets, if you have them.

A stolen phone in 2026 isn't just a stolen device. It's a stolen key to your entire digital life.

The good news: if you act fast, you can lock the thief out of almost everything. The bad news: "fast" means minutes, not hours. Every minute you delay is a minute the thief has to access your accounts, make purchases, and exploit your data.

Here's exactly what to do, in order, as fast as possible.

Minute 0-3: Lock Your Phone Remotely

This is the single most important step. Do this before anything else.

iPhone

From any browser or another Apple device, go to icloud.com/find and sign in with your Apple ID. Select your stolen device. Click "Mark As Lost." This immediately locks your phone with your passcode, disables Apple Pay, and displays a custom message with a contact number on the lock screen.

If you have another Apple device nearby, open the Find My app and do the same thing from there — it's faster.

Android

From any browser, go to android.com/find and sign in with the Google account linked to your phone. Select your device. Click "Secure device." This locks the phone, signs you out of your Google account, and lets you display a recovery message on the lock screen.

Android also has newer features: Theft Detection Lock uses AI to detect when your phone is snatched and automatically locks the screen. Remote Lock lets you lock your phone just by entering your phone number at android.com/lock. But these need to be enabled beforehand — check Settings → Security → Theft Protection on your Android device now, before you need them.

While You're Here: Track the Location

Both Find My (Apple) and Find My Device (Google) show the phone's last known location on a map. Note this location — you'll need it for the police report.

Do NOT try to recover the phone yourself. Confronting a thief is dangerous. People have been seriously injured and killed over phone theft. Let law enforcement handle recovery.

Minute 3-5: Call Your Mobile Carrier

Call your carrier's customer service immediately and report the phone as stolen. They can suspend your service, which prevents the thief from making calls, using your data plan, and — critically — receiving SMS messages, including two-factor authentication codes.

If you have a physical SIM card (not eSIM), the thief could remove it and put it in another device to receive your texts and calls. Suspending the line stops this immediately.

If you use an eSIM, this risk is lower because the eSIM can't be physically removed, but you should still suspend the line.

Ask your carrier to also block the device's IMEI number. The IMEI is a unique identifier for your phone — blocking it prevents the phone from being used on any network, even with a different SIM card. This is recorded in a national database that all carriers check. Your IMEI number is in your phone's original box, or you can find it ahead of time by dialing *#06# on your phone. Write it down and store it somewhere safe now.

Minute 5-10: Secure Your Critical Accounts

Now you need to lock down the accounts that matter most, in order of priority.

Email First

Your email account is the master key to everything else. Password resets for your bank, social media, and every other service go through email. If the thief gets into your email, they can take over everything.

From a computer or borrowed device, log into your email account and immediately change your password. Then go to your account's security settings and sign out of all other sessions. On Gmail, go to Security → Your devices and remove the stolen phone. On Outlook, go to Security → Sign-in activity and end all sessions.

Banking and Financial Apps

Log into your bank's website from a computer and check for unauthorized transactions. If you see any — or even if you don't but want to be safe — call your bank's fraud department and report the phone as stolen. Ask them to put a temporary freeze or alert on your accounts.

If you use Apple Pay or Google Pay, your cards should already be disabled from the "Mark As Lost" / "Secure device" step. But contacting your bank directly adds an extra layer of protection.

Social Media

Change passwords for your most important social media accounts. Check logged-in sessions and remove the stolen device. On Facebook, go to Settings → Security and Login → Where You're Logged In. On Instagram, Settings → Login Activity. On X/Twitter, Settings → Security → Sessions.

Password Manager

If you use a password manager (and you should), your vault is protected by your master password or biometrics. The thief shouldn't be able to access it without your master password. But as a precaution, log into your password manager from a computer and check for any unauthorized access. If your password manager has an option to deauthorize devices, remove the stolen phone.

Minute 10-15: File Reports

Police Report

Call your local police department and file a theft report. Provide: the make and model of the phone, the IMEI number, the last known location from Find My / Find My Device, the date, time, and location of the theft.

A police report is necessary for insurance claims and can help law enforcement track stolen devices. Keep the case number — you'll need it for your insurance claim and potentially for your carrier.

Insurance Claim

If you have phone insurance (through your carrier, Apple Care+ with Theft and Loss, or a separate policy), file a claim as soon as possible. Most policies require reporting within 48 hours.

After the Immediate Crisis: The Next 24-48 Hours

Change All Passwords

Using your password manager on a clean device, change passwords for every account that was logged in on your stolen phone. Prioritize financial accounts, email, cloud storage, and anything with payment information.

Review Two-Factor Authentication

If you used SMS-based 2FA on any accounts and the thief could have intercepted texts before you suspended the line, those accounts are at risk. Switch any remaining SMS-based 2FA to authenticator app or passkey-based authentication on your new device.

Check for Unauthorized Activity

Over the next few days and weeks, monitor your bank statements, credit card statements, and email for signs of unauthorized access. Set up transaction alerts with your bank if you haven't already. Check your credit report for any unexpected activity.

Consider Remote Wipe

If it becomes clear you won't recover the phone, use Find My (Apple) or Find My Device (Google) to remotely erase the device. This permanently deletes all data from the phone.

On iPhone, "Erase This Device" wipes everything and activates Activation Lock — which means the phone cannot be set up by anyone else without your Apple ID password. The phone becomes a brick to the thief.

On Android, "Erase device" wipes your data. If your phone runs Android 15 or later with factory reset protection enabled, the phone will be locked to your Google account even after a reset.

Only do this after you've exhausted all recovery options and backed up any data you need.

What You Should Do RIGHT NOW (Before Your Phone is Stolen)

Everything above is reactive. Here's the proactive checklist that makes recovery possible:

Enable Find My / Find My Device. This must be set up before the phone is stolen. Without it, you can't remotely lock, locate, or wipe your device.

Write down your IMEI number. Dial *#06# on your phone right now. Write the number down and store it with your important documents.

Enable theft protection features. On Android: Settings → Security → Theft Protection — enable Theft Detection Lock, Remote Lock, and Offline Device Lock. On iPhone: Settings → Face ID & Passcode — ensure "Stolen Device Protection" is enabled (requires iOS 17.3+).

Use an eSIM instead of physical SIM. An eSIM can't be physically removed, which prevents the thief from immediately using your number in another device. We covered this in our smartphone privacy settings article.

Set a strong passcode. Six digits minimum, alphanumeric is better. No patterns (they leave smudge marks). No birthdays.

Back up your phone regularly. If you need to remote wipe, a recent backup means you lose nothing. Enable iCloud Backup or Google Backup — we covered this in our backup strategy guide.

Use a password manager. If all your passwords are in a password manager with a strong master password, a phone thief can't access your accounts even if they get past the lock screen. And you can easily change all passwords from another device.

Use authenticator apps, not SMS, for 2FA. SMS codes can be intercepted if the thief gets your SIM card. Authenticator apps are tied to the device and can be set up on a new device using backup codes.

Your phone will probably never be stolen. But if it is, the difference between a minor inconvenience and a major catastrophe comes down to fifteen minutes of decisive action and a few minutes of preparation done today.

Take five minutes right now. Enable Find My. Write down your IMEI. Enable theft protection. Check your backup.

Your future self will thank you.