Having your phone stolen is stressful. Acting quickly and in the right order can make the difference between protecting your data and losing it — and between a successful insurance claim and a failed one.
This guide covers exactly what to do, in what order, when your phone is stolen.
Act Immediately: The First 30 Minutes Matter
The faster you act, the better. A thief who has your phone will likely try to use it immediately, and some actions (like remote wipe) are only possible while the device is still connected to the internet.
Priority order in the first 30 minutes:
- Lock or remotely wipe the device (while it may still be online)
- Call your carrier to suspend the SIM
- Change your email and key account passwords from another device
Step 1: Remote Lock and Wipe
If your device was set up with Find My (iPhone) or Find My Device (Android), you may still be able to interact with it remotely.
iPhone via iCloud:
- Go to iCloud.com on any browser and sign in
- Click Find My > select your iPhone
- Select Lost Mode to lock the device with a PIN and display a contact message
- If recovery is unlikely, select Erase iPhone to wipe all data
Lost Mode is preferable initially — it locks the device but preserves location tracking. Erase is final.
Android via Google:
- Go to android.com/find and sign in with your Google account
- Select the stolen device
- Choose Secure Device to lock with a PIN and display a message
- Or choose Erase Device to wipe all data
Samsung: Go to findmymobile.samsung.com, sign in, select device, and use Remote Lock or Remote Wipe.
Xiaomi: Go to i.mi.com, sign in, select device, and use Erase Data.
Step 2: Suspend Your SIM
Call your carrier's customer service immediately and report the phone as stolen. Ask them to:
- Suspend your SIM card — this prevents the thief from making calls or using mobile data on your plan
- Order a replacement SIM if you need to keep your number
- Begin the blacklist process for the device IMEI
Have your IMEI ready (see below for how to find it). Your carrier will need it to blacklist the device.
Step 3: File a Police Report
File a police report as soon as possible. In the UK, this can be done online at action.fraud.police.uk or by calling 101. In the US, contact your local police department — many allow online reporting for theft.
Provide:
- Device make, model, colour, and condition
- The IMEI number
- Date, time, and location of theft
- A description of how it was stolen
Keep the crime reference number — you will need it for insurance claims and potentially for carrier blacklisting.
Step 4: Get the IMEI and Blacklist the Device
To blacklist the device, your carrier (and the police report) need the IMEI. Find it from:
- Your carrier account: Log in to your carrier account; the IMEI of registered devices is in device management
- iCloud account: iCloud.com > Find My > click the device > device info
- Google account: myaccount.google.com > Security > Your Devices
- Original box: The IMEI barcode is on the retail packaging
- Purchase receipt: Carrier receipts often include the IMEI
If your carrier has not already done so, explicitly request that they add the IMEI to the GSMA blacklist. Most carriers do this as part of the stolen device report.
Step 5: Change Your Passwords
From another device, change passwords for:
- Your email account (highest priority — controls password reset for everything else)
- Online banking and financial apps
- Social media
- Any work accounts
Enable two-factor authentication on everything that supports it.
If your email is already compromised (if the thief got into it before you could act), contact your email provider's support for account recovery.
Step 6: File an Insurance Claim
If you have phone insurance, file the claim as soon as you have:
- The police crime reference number
- The IMEI number
- Proof of purchase
Insurance claims typically have a time limit (often 24-48 hours for theft), so do not delay.
What Happens After You Report
Blacklist propagation: After your carrier adds the IMEI to the blacklist, it propagates through the GSMA system to other carriers within 24-72 hours. In the UK, CEIR distribution is typically fast. In the US, major carriers share data through the CTIA's Stolen Phone Checker.
The device stops working: Once blacklisted, the stolen phone cannot connect to any participating carrier's network. The thief cannot make calls or use mobile data. The device becomes significantly less useful and difficult to sell.
Recovery: Recovered stolen phones do occasionally turn up — through police operations, marketplace monitoring, or the original owner spotting it for sale. If your phone is recovered, contact police with the crime reference number and IMEI. Request blacklist removal from your carrier once it is confirmed as recovered.
If Recovery is Unlikely
Once a phone has been stolen and thoroughly wiped:
- Focus on insurance claim and replacement
- Update any apps that use the phone for two-factor authentication (if you can no longer receive SMS on the old number, you may be locked out of some accounts — contact those services directly)
- Notify your bank if the phone was used for mobile banking or two-factor authentication
Report the theft using our Stolen Phone Report tool at DeviceDecoded. This adds the IMEI to our database, which flags it in checks made by potential buyers — even in markets where the GSMA propagation has not yet reached.
Preventing Future Phone Theft
- Use a strong PIN or biometric lock — do not use easily observable PINs
- Enable Find My (iPhone) or Find My Device (Android) proactively
- Register your IMEI now, before theft happens, so you have it on record
- Consider cable locking at public charging points or in high-theft areas
- Some insurers offer discounts for devices with active tracking enabled