Lost Phone Checklist: What to Do in the First Minutes, Hours and Days

Losing a phone creates two problems at once: the physical device is missing, and the accounts inside it may be exposed. A calm, ordered response can protect data, preserve the chance of recovery and produce stronger evidence for the operator, insurer or police.

The right sequence depends on whether the phone is probably misplaced, definitely stolen, online, offline, locked or unlocked. Use this checklist as a practical framework and adapt it to local rules.

First five minutes: call and locate

1. Call the phone from another number.
2. Use Apple Find My or Google’s official device-finding service.
3. Check the last known location.
4. Make the phone play a sound if the service allows it.
5. Retrace the last safe places you visited.

If the map shows an unfamiliar or unsafe location, do not attempt recovery alone.

Remotely lock the device

If the phone is not immediately found, mark it as lost or secure it through the official platform. Add a safe contact number or message. Do not display sensitive personal information on the lock screen.

The FCC recommends remotely locking a missing smart device even when it may only be lost. A strong screen lock reduces exposure, but remote security adds another layer.

Decide whether to erase it

Remote erasure protects stored data, but it may affect future location or recovery functions. Before erasing:

• review the official Apple or Google guidance;
• consider whether the phone is still reporting location;
• save screenshots of the map and device status;
• protect critical accounts;
• check insurance or law-enforcement requirements.

When highly sensitive data is exposed and recovery appears unlikely, erasure may be appropriate. The decision is specific to the device and circumstances.

Protect the main email account

Email often controls password resets for banking, social media and cloud services. If the phone was unlocked or the passcode may be known:

• change the email password;
• review signed-in sessions;
• revoke the missing device where appropriate;
• verify recovery email and phone settings;
• enable multi-factor authentication.

Protect banking and payment apps

Contact financial institutions when unauthorized access is possible. Suspend mobile-wallet cards, review transactions and change credentials. Do not wait for visible fraud if the phone and authentication methods may be exposed.

Secure messaging and social accounts

Review active sessions for WhatsApp, Facebook, Instagram, Telegram and other important services. Log out the missing device where supported. Warn close contacts if someone may impersonate you.

Contact the mobile operator

Ask the operator to suspend or replace the SIM or eSIM. This helps prevent calls, SMS interception and mobile-number abuse. Ask for a service reference number and discuss any authorized lost-device or IMEI restriction process available in the country.

SIM suspension and device restriction are different actions. Blocking the SIM protects the subscription; an IMEI-related restriction concerns the device identifier.

Collect the IMEI and serial number

Find the identifiers from:

• the original retail box;
• invoice or retailer email;
• operator or financing record;
• Apple or Google owner account;
• insurance or repair documents;
• an existing device registration.

Follow the IMEI recovery guide if the device is already missing.

Write an incident timeline

Record the facts while they are fresh:

• date and approximate time;
• last confirmed location;
• places visited;
• people contacted;
• location screenshots;
• calls made to the phone;
• operator reference number;
• any suspicious messages or demands.

A clear timeline is more useful than a vague statement written days later.

Report theft or serious loss

Police-reporting requirements vary. A formal report may be needed for insurance, operator action or later recovery. Include the make, model, colour, IMEI, serial number, phone number, incident details and ownership evidence.

Do not exaggerate or guess. Distinguish what you know from what you suspect.

Submit a structured device report

Use IMEI Alert’s report-device form to create a device and incident workflow. The initial report can capture owner contact, IMEI, brand, model, incident type, date and location. Supporting documents can be requested or added later.

If someone contacts you about the phone

A genuine finder may call the lock-screen number. A scammer may demand money, send a fake login page or threaten to sell data. Follow these rules:

• do not reveal the device passcode;
• do not provide one-time codes;
• do not remove the device from your account before safe recovery;
• do not click unfamiliar account-login links;
• meet only in a safe public location;
• involve local authorities or venue security when risk exists.

Watch for phishing after a loss

Attackers may send a message claiming the phone has been found and direct you to a fake Apple or Google page. Open the official service manually instead of following the message link. Never provide credentials to “confirm ownership” through an unknown website.

Replace the SIM carefully

After obtaining a replacement SIM or eSIM, verify that calls, SMS and account recovery work correctly. Review services that use SMS-based authentication and update security settings where needed.

Notify employer or school

If the phone contains work email, customer data, institutional access or authentication apps, report the incident to the relevant IT or security team. They may need to revoke certificates, sessions or device-management access.

Notify the insurer

Follow the policy deadline. Prepare the invoice, police report where required, IMEI, operator confirmation and incident statement. Keep copies of everything submitted.

What not to do

• Do not confront a suspected thief.
• Do not pay an unverified “IMEI tracker”.
• Do not post the full IMEI publicly.
• Do not delete evidence or threatening messages.
• Do not remove account protection merely because a stranger asks.
• Do not assume a phone is safe because it briefly appears offline.

After recovery

If the phone is recovered:

• verify the IMEI and serial number;
• inspect it for tampering;
• change important credentials;
• scan or reset the device if compromise is suspected;
• update the operator, insurer, police and registry case;
• mark the device recovered only after verification.

Prepare for the future

Once the immediate incident is resolved, improve prevention:

• use a strong passcode;
• enable the official device-finding service;
• hide sensitive lock-screen notifications;
• back up important data;
• record both IMEIs and the serial number;
• store the invoice securely;
• register the device before another incident.

Sources and further reading

• FCC: Protect Your Smart Device
• Google: Find, secure or erase a lost Android device
• Apple Find My support