Oğurlanmış noutbuk və ya smartfon: uzaqdan kilidləyin, silin və bərpa edin¶

Ekran kilidi açıq olan zaman smartfonunuzun hərəkətli küçədə əlinizdən qaçırılması və ya noutbukunuzun kafe, hava limanı və ya avtomobildən oğurlanması təcili rəqəmsal təhlükəsizlik böhranıdır. Bu gün peşəkar küçə oğruları ("çiyin sörfçüləri" və moped oğurlayanlar) ehtiyat hissələri üçün avadanlıq satmaq üçün nadir hallarda telefon oğurlayırlar. Əvəzində onlar çiyninizdə 4 və ya 6 rəqəmli ekran parolunuzu yazmağınıza, kilidi açılmış cihazı qapmağınıza və Apple ID və ya Google parolunuzu dəyişdirmək, sizi bulud hesabınızdan kənarlaşdırmaq, SMS iki faktorlu autentifikasiya kodlarını ələ keçirmək, bank hesablarını və kripto pul kisələrini boşaltmaq və rəqəmsal adınızdakı kreditlər üçün müraciət etmək üçün ilk 5-15 dəqiqə ərzində yarışmağınızı izləyirlər.

Your response during the first 60 minutes determines whether a stolen phone or laptop remains a minor hardware replacement or becomes a catastrophic financial and identity-theft breach. This guide walks you step-by-step through the exact sequence to lock or wipe an iOS, Android, macOS, Windows, or Linux device remotely, sever active browser and OAuth session tokens before thieves can exploit them, lock down your SIM/eSIM and banking apps, blacklist the device's hardware IMEI number, and avoid criminal phishing messages designed to trick you into unlocking the stolen device.

Bunu indi edin¶

1. Do NOT chase a thief or confront anyone at a GPS location pin: Never physically pursue a mugger or walk up to a house or apartment shown on your Find My map. If you were just robbed, assaulted, or threatened, move immediately to a well-lit public building at least 100 meters (330 feet) away and call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our təcili nömrələr kataloq.
2. İlk 5 dəqiqə ərzində etibarlı dostunuzun telefonunu və ya kompüterini borc alın və dərhal "İtirilmiş Rejim / Uzaqdan Kilidi" işə salın:
   • For an iPhone, iPad, or Mac: Go directly to iCloud.com/find in any web browser. Sign in with your Apple Account (Apple allows access to iCloud.com/find without requiring a 2-factor verification code sent to your stolen device) and click Mark As Lost to immediately lock the screen, disable Apple Pay, and display a recovery message.
   • For an Android Phone, Tablet, or Chromebook: Go directly to google.com/android/find (Google Find My Device), sign in, and click Secure device to lock the screen with your PIN and sign out of Google Pay.
   • For a Windows Laptop: Go to account.microsoft.com/devices, select your laptop, and click Find my device -> Lock.
3. If the phone was snatched while UNLOCKED (or if the thief saw you type your screen passcode), trigger a full "Remote Erase / Factory Wipe" immediately instead of just locking it: If a thief knows your 6-digit passcode or keeps an unlocked screen awake, "Lost Mode" alone will not stop them from unlocking the phone again with that passcode. On iCloud.com/find və ya google.com/android/find, click Erase This Device / Factory Reset Device immediately (on iOS 15+ and modern Android, erasing the device remotely does NOT disable Activation Lock, and on supported iPhones, you can still track the erased iPhone's GPS location via the Find My network).
4. Strict Sequence Rule: Do NOT suspend your cellular line with your carrier until AFTER you have sent the Remote Lock / Remote Erase command: If your stolen phone is currently on cellular data (4G/5G) away from Wi-Fi and you call your mobile carrier first to deactivate the SIM/eSIM, the phone instantly loses internet connectivity and will never receive your Remote Lock or Remote Wipe command. Send the iCloud.com/find və ya google.com/android/find lock/wipe command first, wait 2 minutes (or confirm it queued), and then call your mobile carrier to suspend the SIM/eSIM and block the phone's 15-digit IMEI number.
5. Log in to your primary email account (Gmail, Outlook, iCloud Mail, Proton) from a clean device, change the password, and click "Sign out of all other sessions": A stolen laptop or phone holds persistent login cookies and OAuth session tokens for your email, cloud storage, and password manager. Changing your password and clicking Sign out of all web and mobile sessions in your Google (myaccount.google.com/security), Apple (account.apple.com), and Microsoft security dashboards immediately invalidates the cached tokens sitting on the stolen hardware.
6. Call the fraud department of your bank and credit card issuers to freeze mobile banking access and revoke digital wallet tokens: Ask your bank's fraud desk to (1) terminate all active mobile app sessions, (2) delete all provisioned Apple Pay, Google Wallet, and Samsung Pay virtual card tokens (DPANs) linked to the stolen device, and (3) place a temporary outbound wire/Zelle/peer-to-peer transfer hold on your checking account.

Decision flowchart: first-hour response to a stolen smartphone or laptop¶

flowchart TD
    Start["Smartphone or Laptop Stolen or Snatched"] --> Safety["Confirm Physical Safety: Do Not Chase Thief"]
    Safety --> UnlockedCheck{"Was the Device Snatched While UNLOCKED, or Could the Thief Know Your Passcode?"}
    UnlockedCheck -->|"Yes, Snatched Unlocked or Passcode Compromised"| ImmediateWipe["Go to iCloud.com/find or google.com/android/find FIRST: Trigger Remote Erase / Wipe Immediately"]
    UnlockedCheck -->|"No, Screen Was Locked with Strong Biometrics/Passcode and Full Disk Encryption"| RemoteLock["Go to iCloud.com/find, google.com/android/find, or account.microsoft.com/devices: Trigger Lost Mode / Remote Lock"]
    ImmediateWipe --> RevokeSessions["Log Into Primary Email, Apple/Google Account, and Password Manager: Change Passwords + Revoke All Active Session Tokens"]
    RemoteLock --> RevokeSessions
    RevokeSessions --> CarrierFreeze["Call Mobile Carrier: Suspend Physical SIM / eSIM Line, Port-Out Freeze, and Blacklist 15-Digit IMEI Number"]
    CarrierFreeze --> BankLock["Call Banks & Payment Apps (Zelle, Venmo, Cash App, Revolut, PayPal): Freeze Mobile Sessions & Revoke Digital Wallet Tokens"]
    BankLock --> PoliceReport["File Official Police Report Listing Device Serial Number and 15-Digit IMEI/MEID for Insurance & Carrier Blacklist"]

Step 1: Execute the exact Remote Lock and Remote Wipe protocol by operating system¶

How you lock or erase your stolen hardware, and whether you can reach the dashboard without having a 2-factor authentication SMS sent to the very phone that was just stolen, depends on your operating system:

Platform-by-platform remote lock, wipe, and 2FA-bypass reference¶

What if the thief put your iPhone or Android into "Airplane Mode" or turned it off?¶

Modern operating systems have closed the "Airplane Mode / Power Off" loophole: - On iOS 15 and newer: Even when a thief holds the side button and powers the iPhone completely OFF (or even after the battery dies for up to 24 hours, or after a remote wipe), the iPhone's Ultra Wideband (UWB) and Bluetooth Low Energy radio chips remain active in a low-power state. Whenever any other person's iPhone, iPad, or Mac walks within 10 to 30 meters (33 to 100 feet) of your powered-off stolen iPhone anywhere in the world, your phone silently pings Apple's encrypted Find My Crowd-Sourced Network and updates its exact GPS location on your iCloud.com/find map. - On Android 9+ with Google's Expanded Find My Device Network (and Samsung Offline Finding): Supported Android devices (such as Pixel 8/9 series and Galaxy S23/S24 series) similarly broadcast encrypted Bluetooth beacons to nearby Android devices even when offline or powered down.

Step 2: What to do if the thief saw your passcode ("Shoulder Surfing" recovery)¶

In major cities across the United Kingdom, the United States, Europe, and Latin America, organized criminal gangs stand behind victims in bars, trains, and coffee shops, film or watch the victim type their 6-digit iPhone or Android passcode, and then grab the phone out of the victim's hands.

Why a known passcode is so dangerous (And how Stolen Device Protection stops it)¶

• If you ALREADY had Apple's "Stolen Device Protection" turned ON (Settings -> Face ID & Passcode -> Stolen Device Protection):
  • Introduced in iOS 17.3, Stolen Device Protection is a lifesaver: when your iPhone is away from familiar locations (like your home or workplace), the iPhone completely blocks your 6-digit numeric passcode from being used as a fallback for sensitive actions. Even if the thief knows your 6-digit passcode, they cannot view your saved iCloud Keychain / Passwords app vault, cannot turn off Lost Mode, cannot erase the phone, and cannot change your Apple Account password without passing a live Face ID / Touch ID biometric scan plus waiting through a mandatory 1-hour security delay followed by a second biometric scan.
• If you did NOT have Stolen Device Protection turned on (or if an unlocked Android/iPhone was snatched without biometric protection):
  • A thief who knows your 6-digit screen passcode can open Settings, tap your name, and tap "Change Password -> Forgot Password" using only your 6-digit screen passcode to reset your entire Apple Account password, turn off Find My iPhone, add their own Face ID, and open your saved password manager within 90 seconds.
  • Your Immediate Emergency Counter-Attack:
    1. Race to iCloud.com/find və ya google.com/android/find within the first 2 minutes and click "Erase This Device" (Remote Wipe) before the thief can open Settings.
    2. Check if the thief ALREADY changed your Apple Account password and locked you out: If you try to log in to account.apple.com and get "Incorrect Password" or see a recovery key you never created, call Apple Support immediately and simultaneously call your mobile carrier to deactivate your SIM/eSIM so the thief can no longer receive SMS verification codes from your bank.
    3. If your stolen phone held your saved passwords in Apple Passwords / iCloud Keychain or Google Password Manager: Assume the thief opened your password list using your screen passcode and photographed or exported your banking, email, and crypto passwords. Immediately use a clean computer to change the passwords on your top 10 critical accounts (Primary Email, Secondary Recovery Email, Checking/Savings Banks, Brokerage/Retirement Accounts, Venmo/PayPal/Cash App, Crypto Exchanges, and Amazon/Shopping accounts).

Step 3: Sever active login sessions, OAuth tokens, and SSH/API keys (Especially for stolen laptops)¶

When a laptop or smartphone is stolen, changing your account password alone is not always enough if the web service allows existing active session cookies or mobile app tokens to stay logged in for 30 days after a password change. You must explicitly revoke all active device sessions across your core digital hubs:

Checklist: Where to click "Sign Out of All Devices" in under 10 minutes¶

• 1. Google / Gmail / Google Workspace (myaccount.google.com/device-activity):
  • Click on the stolen phone or laptop in the device list and click the blue "Sign out" button. Then go to myaccount.google.com/security, change your Google Account password, and inspect 2-Step Verification -> Authenticator app / Passkeys to revoke any passkey bound solely to the stolen hardware.
• 2. Apple Account / iCloud (account.apple.com):
  • Sign in, change your Apple Account password, and select "Sign out of all browsers and devices currently signed in with your Apple Account." (Strict Warning: Do not click "Remove from Account" on the stolen iPhone/Mac inside the Devices list, because clicking "Remove from Account" disables Activation Lock; instead, leave it listed in iCloud.com/find in Lost Mode or Pending Erase forever).
• 3. Microsoft Account / Office 365 / OneDrive (account.microsoft.com/security):
  • Click Manage how I sign in -> Sign me out everywhere, which forces all Windows laptops, browsers, Outlook clients, and OneDrive apps to terminate their session tokens within 24 hours.
• 4. Password Managers (1Password, Bitwarden, Dashlane, Keeper, Proton Pass):
  • Log in to your password manager's web vault from a clean computer, go to Account Settings -> Security / Deauthorize Sessions, and click "Deauthorize All Other Sessions / Revoke All Devices." This forces the desktop app or browser extension on your stolen laptop/phone to purge its decrypted memory cache and require the full Master Password + Secret Key again.
• 5. Communication & Social Apps (WhatsApp, Signal, Telegram, Slack, Discord):
  • WhatsApp: Once you activate a replacement SIM/eSIM with your phone number on a new phone and log in to WhatsApp, WhatsApp automatically logs out the stolen phone (because WhatsApp only allows one primary phone per number). Then immediately go to Settings -> Linked Devices on your new phone and log out any linked laptop browsers.
  • Telegram & Signal: Open Settings -> Devices (Active Sessions) and click "Terminate All Other Sessions" to wipe local message caches on the stolen laptop or phone.
• 6. Developer, Cloud, and Corporate Credentials (For Stolen Laptops):
  • If your stolen laptop contained a terminal with unencrypted or cached credentials, immediately log in from another machine and revoke:
    • GitHub / GitLab SSH Keys & Personal Access Tokens: github.com/settings/keys və github.com/settings/tokens.
    • AWS / Google Cloud / Azure CLI Credentials: Deactivate the IAM Access Keys stored in ~/.aws/credentials və ya ~/.config/gcloud.
    • Corporate VPN / Tailscale / Cloudflare Zero Trust: Notify your employer's IT Security / SOC Help Desk immediately so they can revoke the laptop's MDM certificate, Tailscale node key, and Okta/Entra ID session.

Step 4: Lock down your SIM/eSIM card and blacklist the 15-digit IMEI number¶

Wait until you have queued your Remote Lock or Remote Erase command on iCloud.com/find və ya google.com/android/find. As soon as that command is sent, call your mobile wireless carrier from a friend's phone:

1. Prevent a physical SIM Swap into another phone:
   • If your stolen phone used a physical nano-SIM card without a SIM PIN, a thief can pop the SIM tray open, insert your SIM into an unlocked burner phone, and immediately receive every SMS text message and phone call sent to your number (including bank 2FA codes), even if your stolen phone was locked. Tell your carrier representative to suspend your cellular line, deactivate the stolen SIM/eSIM, and place an Account Port-Out Freeze on your account.
2. Transfer your phone number to a new eSIM or replacement physical SIM today:
   • Visit an official retail store of your mobile carrier with your photo ID to issue a replacement eSIM or physical SIM card with your existing phone number, which permanently deactivates the SIM/eSIM inside the stolen phone.
3. Add your stolen phone's 15-digit IMEI number to the Global GSMA Blacklist:
   • Find your phone's 15-digit IMEI (International Mobile Equipment Identity) on the original retail box barcode sticker (measuring roughly 15 by 8 centimeters, or 6 by 3 inches), inside account.apple.com -> Devices or google.com/android/find -> Device Info, or on your carrier bill. Give that 15-digit IMEI to your carrier to blacklist on the Global GSMA IMEI Database and include it on your police report.

Step 5: Financial and identity-theft containment (When a thief accessed your unlocked phone)¶

If a thief had access to your unlocked phone, assume they searched your Photos, Notes, and Mail apps for IDs, passwords, and crypto seed phrases:

• 1. Freeze your credit reports at all three major credit bureaus (100% Free): Place an immediate Security Freeze at Equifax (equifax.com/personal/credit-report-services), Təcrübəli (experian.com/freeze), and TransUnion (transunion.com/credit-freeze) (or CIFAS Protective Registration in the UK / Equifax & TransUnion Canada) to block thieves from opening loans or credit cards in your name.
• 2. Revoke Peer-to-Peer Payment Apps (Venmo, Cash App, Zelle, PayPal, Revolut, Monzo, Wise): Log in to your payment apps on a web browser, change passwords/PINs, remove linked debit cards temporarily, and log out all active devices.
• 3. Sweep Cryptocurrency Wallets if a Seed Phrase Was Stored on the Device: If a photo or note containing a 12- or 24-word BIP-39 seed phrase was on the device, create a brand-new wallet on a clean device immediately and transfer 100 percent of your assets to the new wallet address today.
• 4. Replace Your Authenticator App (2FA TOTP Codes): Restore your cloud-synced TOTP tokens on your replacement phone (or use your printed 8-digit 2FA Backup Recovery Codes to register a new authenticator app and delete the old device's token).
• 5. File an Official Police Report and Check Credit Card "Cell Phone Protection" Insurance: File a police report listing the make, model, Serial Number, and 15-digit IMEI. If you pay your monthly wireless bill with a qualifying credit card (such as Chase Freedom Flex, Wells Fargo Autograph, Capital One Venture X, or Amex Platinum), submit a claim for 600 to 1,000 USD in built-in Cell Phone Theft Insurance.

International guidance: United Kingdom, Canada, and Australia¶

• Birləşmiş Krallıqda (Bank 159, Police 101, and Immobilise.com): İstənilən telefonu götürün və yığın 159 (Stop Scams UK) Böyük Britaniya banklarının (Barclays, Lloyds, HSBC, NatWest, Santander, Monzo, Starling, Revolut) fırıldaqçılıq şöbəsinə birbaşa qoşulmaq və bank tətbiqinizi dondurmaq üçün. Cinayət Referans Nömrəsini əldə etmək üçün 101 nömrəsinə 15 rəqəmli IMEI ilə oğurluq barədə polisə məlumat verin (telefonu qara siyahıya salmaq və sığortanı emal etmək üçün EE, O2, Vodafone və Üç tərəfindən tələb olunur) və cihazı ** işarəsi ilə qeyd edin.Immobilise.com.
• Kanadada (CWTA Qara Siyahı və Kanada Anti-Fraud Mərkəzi): Telefonu milli CWTA Oğurlanmış Cihaz Qara Siyahısında bloklamaq üçün operatorunuza (Rogers, Bell, Telus, Freedom) 15 rəqəmli IMEI-ni verin** (devicecheck.ca), Equifax Canada və TransUnion Canada ilə fırıldaqçılıq xəbərdarlığı yerləşdirin və şəxsiyyətin pozulması barədə Kanada Anti-Fraud Mərkəzinə (1-888-495-8501) məlumat verin.
• In Australia (AMTA IMEI Blocking and IDCARE): Ask your mobile provider (Telstra, Optus, Vodafone/TPG) for both a Service Bar and an AMTA IMEI Handset Block across all Australian networks (amta.org.au). If photos of your Australian driver licence, Medicare card, or passport were on the device, call IDCARE at 1800 595 160 (idcare.org) for a free credential-replacement plan.

Tez-tez verilən suallar¶

Mənbələr yoxlanılıb¶

• Apple Platform Security & Apple Support (United States): If Your iPhone, iPad, or Mac Is Lost or Stolen (support.apple.com/HT201472 & HT204756), About Stolen Device Protection for iPhone, Activation Lock Architecture, and Secure Enclave Cryptographic Erase Specifications.
• Google Android Security & Help Center (United States): Find, Lock, or Erase a Lost Android Device (support.google.com/android/answer/6160491), Factory Reset Protection (FRP), and Google Find My Device Crowd-Sourced Offline Network.
• Cybersecurity and Infrastructure Security Agency (CISA) & Federal Trade Commission (FTC, United States): Protecting Mobile Devices from Theft and Data Compromise, Consumer Advice on Lost or Stolen Smartphones (consumer.ftc.gov), and IdentityTheft.gov Credit Freeze Protocols.
• National Cyber Security Centre (NCSC), Metropolitan Police, and Stop Scams UK (United Kingdom): NCSC Guidance on Dealing with a Lost or Stolen Device, Stop Scams UK 159 Emergency Banking Hotline, and Immobilise.com UK National Property Register.
• Canadian Wireless Telecommunications Association (CWTA) & Canadian Anti-Fraud Centre (Canada): CRTC-Mandated National Stolen Device IMEI Blacklist (devicecheck.ca) and Identity Fraud Prevention Guidelines.
• Australian Mobile Telecommunications Association (AMTA) & IDCARE (Australia): AMTA Lost or Stolen Phone IMEI Blocking Procedures (amta.org.au) and IDCARE National Cyber & Identity Recovery Response (idcare.org).

Əlaqədar təlimatlar¶

• SIM swapping and mobile number hijacking
• Şifrə meneceri kilidi və təcili anbarın bərpası
• Bank account breach and unauthorized wire recovery
• Phishing and compromised email or social accounts
• Identity theft response and credit freeze