How to Secure Your Bank Accounts If Your Phone Is Lost or Stolen

Your phone is gone. Maybe you left it in an Uber or Lyft, had it snatched at a concert, or simply can’t find it anywhere. In the first few minutes, the instinct is to panic, but what you actually do in the next hour matters far more than the phone itself.

Nowadays, smartphones are often master keys to our financial lives. You likely have your banking apps, email account, two-factor authentication codes, saved passwords, and even your digital wallet all live on your phone. In the wrong hands, a lost or stolen phone can give someone direct access to your financial lifelines: bank accounts, credit cards, and personal data before you’ve even realized it’s gone.

Here’s what to do if your phone is stolen step by step, in order of priority.

Step 1: Lock or Wipe the Phone Remotely

The moment you realize your phone is missing, your first move should be to cut off any access to the device itself. Luckily, smartphones allow owners to manage access even if the phone is no longer in your possession.

For iPhone users, go to iCloud.com/find on a computer or any other device with internet access. Next, sign in with your Apple ID, and select your missing phone. From there, you can activate Lost Mode, which locks the screen with a passcode and displays a custom message. If you’re certain the phone has been stolen and you have everything backed up, you can also choose to erase the device entirely.

For Android users, visit google.com/android/find and sign in with your Google account. You’ll have similar options: secure the device with a lock, display a message, or perform a factory reset to wipe it clean.

If your phone contains Apple Pay, Google Wallet, Samsung Wallet, or other digital payment apps, remove your cards from the wallet remotely as soon as possible. Most card issuers can also suspend digital wallet access separately from the physical card.

Most importantly: act fast. Many banking apps stay logged in, and someone with physical access to an unlocked phone could already be inside your accounts. Remote locking won’t undo what may have already happened, but it closes the door going forward.

Step 2: Change Your Email Password First

You might think changing your banking password would be the logical next step. However, before you touch your banking passwords, change your email account password. This step is often overlooked, but it’s critical.

Just consider: your email is the recovery key for almost everything. If someone has your phone and gains access to your email, they can use the “forgot password” feature to reset your banking logins, credit card portals, investment accounts, and more—all before you’ve had a chance to act. Cutting them off at the email level first removes that leverage entirely.

To change your email password, log into your email provider, change the password to something strong and unique, and revoke access to any active sessions you don’t recognize. Most major email providers let you do this under security settings. Look for something like “active sessions” or “devices with access” and sign out of all of them except the one you’re currently using.

Step 3: Change Your Banking and Financial Passwords

After you’ve secured your email, move immediately to your financial accounts. This means:

• Online banking portals for every bank or credit union you use
• Credit card account logins
• Investment and brokerage accounts
• Payment apps like PayPal, Venmo, Cash App, or Zelle
• Digital wallets tied to cards or bank accounts

For each one, change the password and, if available, review active sessions and log out of all other devices. Use a password that’s long, unique, and not used anywhere else. If you use a password manager, sign in and review authorized devices. Consider deauthorizing the lost device and changing the master password if there is any concern it may have been accessed.

Don’t stop at your primary bank. Any financial account that someone could use to move money, open credit, or access personal data is worth updating.

Step 4: Contact Your Bank Directly

Call your bank’s fraud or security line—the one printed on the back of your debit or credit card, or found on the official bank website. Tell them your phone was lost or stolen and ask them to:

• Flag your account for suspicious activity
• Freeze or temporarily lock your debit card if it’s connected to a mobile wallet
• Disable any linked mobile banking sessions
• Issue a new card if there’s any indication it may have been compromised

Banks have dedicated teams for exactly these situations. They can place alerts on your account, monitor for unusual transactions, and in many cases act faster than any fraud detection system would on its own. The sooner you make this call, the smaller the window of exposure.

If you use multiple banks, call each one. Even accounts you consider secondary can be targets.

Step 5: Disable Two-Factor Authentication Tied to Your Phone Number

Many accounts use SMS-based two-factor authentication, meaning a login code gets sent to your phone number. If someone has your phone or has access to your SIM, they can receive those codes and use them to break into your accounts.

Contact your mobile carrier as soon as possible. Ask them to put a SIM lock or port freeze on your account, which prevents your number from being transferred to another device without additional verification. Also request that they flag your account for any recent or pending SIM swap activity.

Once you have a replacement device, update your two-factor authentication settings to use an authenticator app rather than SMS whenever possible. Apps like Google Authenticator or Authy are tied to the device, not the phone number, making them far more resistant to this type of attack.

Step 6: Monitor Your Accounts for Suspicious Activity

Even if you’ve locked the phone, changed your passwords, and alerted your bank, the work isn’t quite done. For the next several weeks, monitor your financial accounts closely.

Check your bank and credit card statements daily for any transactions you don’t recognize, no matter how small. Fraudsters often test stolen account access with minor purchases before making larger ones. Report anything suspicious to your bank immediately; most institutions have strong protections against unauthorized charges when fraud is reported promptly.

It’s also worth placing a fraud alert with the three major credit bureaus: Equifax, Experian, and TransUnion. A fraud alert notifies lenders to take extra steps to verify your identity before extending new credit in your name. If you want stronger protection, you can go a step further and request a credit freeze, which blocks new credit applications entirely until you lift it.

Lastly, consider enrolling in a credit monitoring service or reviewing your credit reports regularly to identify signs of identity theft that may emerge weeks or months after the device was lost.

Step 7: Report to Law Enforcement If Theft Has Occurred

If your phone was stolen rather than simply misplaced, consider filing a police report as soon as possible. While stolen phones usually aren’t recovered, an official report creates a record of the theft that may be helpful if someone attempts to use your personal information or accesses your accounts.

Your financial institution, insurance provider, or wireless carrier may also request a copy of the report if you need to dispute fraudulent activity, file a claim, or replace your device.

Keeping a copy of the report for your records can make it easier to resolve any issues that arise later.

Be Prepared Before It Happens

The best time to think about what to do if your phone is stolen is before it happens. Take a few minutes now to write down—on paper or stored somewhere other than your phone—the fraud line numbers for your bank and credit cards, your mobile carrier’s security contact, and the login credentials for your email account recovery.

You can also take these preventative measures to up your protection beforehand:

• Enable Find My iPhone or Find My Device before you need it.
• Use a strong screen lock (PIN, passcode, or biometric authentication).
• Turn on account alerts for banking and credit card transactions.
• Keep device software updated.

Losing your phone is stressful enough. Having a plan means you spend that first critical hour acting, not scrambling.