Lost or stolen phone: what to do in the first 30 minutes
A phone is the key to email, banking and everyday services. Here is a calm order of action after losing it, without jumping between random guides.
- AUTHOR
- Karol Rapacz / CEO of Breachroad · OSCP · PNPT
- PUBLISHED
- 4 September 2026
- READING TIME
- 8 min read
- TOPIC
- Human Security
First you check your pockets. Then the bag, the car and the table. A few minutes later, panic begins: the phone held photos, email, banking, tickets, codes and identity documents. The worst response is to open random links from search results or trust someone who suddenly claims to have found the device.
What helps is a clear order. Not every loss means that accounts have been breached, but a phone is also a key to account recovery. The first actions should restrict access while preserving the chance of finding it.
Minutes 0–5: call and use the official location service
Call your number from another phone. If the device may be in a safe place, ask venue staff or a trusted person to check. Do not travel alone to an unfamiliar address shown on a map or confront someone you suspect of theft.
For Android, use the official Find Hub; for an iPhone, use Find My or iCloud.com/find. Type the address yourself on a trusted device. If you borrow somebody else’s phone or computer, use guest or private mode and sign out afterwards.
Play a sound if the phone is probably nearby. If you cannot see it, mark the device as lost. Lost mode can also display a safe contact number. Do not enter the number of the missing phone; use a relative’s or friend’s number.
Minutes 5–15: protect payments and your phone number
Contact the mobile provider through a number on its official site and report the missing SIM or eSIM. The number matters because it may receive messages and support account recovery. Ask how to obtain a replacement SIM with the same number.
Call the bank if the phone was unlocked, someone may know the screen passcode or financial apps were active. The bank can help disable mobile access and decide whether payment cards should be blocked. Never sign in to the bank through a link received after the phone goes missing.
For people using Poland’s mObywatel digital-identity app, the Ministry of Digital Affairs provides two ways to remove access to the data: activate the app on another device or report the loss through its helpline at +48 42 253 54 74. Blocking makes the documents and data disappear from the app on the lost phone.
Minutes 15–30: secure the main account
Email comes first because it can often reset passwords for other services. Review recent sign-ins to the Apple or Google account and close unfamiliar sessions. If the phone was unlocked or its passcode may be known, change the password from another trusted device. Then check messaging, social media and work accounts.
Tell your employer if the phone contained work email, chat, an authenticator app or customer information. “I lost the phone at about 14:20; it had a screen passcode” gives the team far more to work with than a report made the next day.
Report a theft to the police. Prepare the make, model, colour, circumstances and IMEI or serial number. Google says an Android IMEI can also be viewed in Find Hub, while Apple explains how to find a serial number without having the device.
When to erase the phone remotely
Erasing is a decision for when recovery looks unlikely or the risk to data outweighs the benefit of continued location tracking. Google warns that an erased Android device will no longer be visible in Find Hub. Apple notes that remote erasure cannot be undone.
For an iPhone, do not remove the device from Find My or the Apple Account, even after erasing it. Apple explains that removal disables Activation Lock and can make the phone easier for a thief to unlock and resell.
Beware the “we found your phone” message
A text or email may arrive with a map and a link asking you to sign in to see the location. It may be phishing intended to capture the password and remove the lock. Apple explicitly says it will not contact you to announce that an iPhone has been found, and it will not ask for the device passcode or a verification code.
You can communicate with a finder without sharing passwords. Arrange any handover in a public place with another person present, and take suspected theft to the police.
Ten minutes of preparation today
Check that Find My or Find Hub works, use a strong screen passcode, enable automatic backups and record the provider’s contact details and the phone’s IMEI somewhere other than the phone. Make sure you can access the main account without relying exclusively on the one device you might lose.
Source facts and Breachroad’s conclusion
The location, locking and erasure options—and their limitations—come from Apple and Google instructions. Poland’s Ministry of Digital Affairs provides the mObywatel blocking process. The 30-minute order, email priority, bank contact and calm-reporting rule are Breachroad recommendations based on the role a phone plays in everyday accounts.
Our smartphone security guide provides a fuller preparation checklist. Organisations should rehearse this scenario for work devices: cybersecurity training for employees teaches people what to report and how to avoid the phishing message that may arrive immediately after a theft.
