Stolen laptop or smartphone: remote lock, wipe, and recovery¶

Having your smartphone snatched out of your hand on a busy street while the screen is unlocked, or having your laptop stolen from a café, airport, or car, is an urgent digital security crisis. Today, professional street thieves ("shoulder surfers" and moped snatchers) rarely steal phones just to sell the hardware for spare parts. Instead, they watch you type your 4- or 6-digit screen passcode over your shoulder, snatch the unlocked device, and race within the first 5 to 15 minutes to change your Apple ID or Google password, lock you out of your cloud account, intercept SMS two-factor authentication codes, drain bank accounts and crypto wallets, and apply for instant digital loans in your name.

Your response during the first 60 minutes determines whether a stolen phone or laptop remains a minor hardware replacement or becomes a catastrophic financial and identity-theft breach. This guide walks you step-by-step through the exact sequence to lock or wipe an iOS, Android, macOS, Windows, or Linux device remotely, sever active browser and OAuth session tokens before thieves can exploit them, lock down your SIM/eSIM and banking apps, blacklist the device's hardware IMEI number, and avoid criminal phishing messages designed to trick you into unlocking the stolen device.

Kora ubu¶

1. Do NOT chase a thief or confront anyone at a GPS location pin: Never physically pursue a mugger or walk up to a house or apartment shown on your Find My map. If you were just robbed, assaulted, or threatened, move immediately to a well-lit public building at least 100 meters (330 feet) away and call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our nimero yihutirwa ububiko.
2. Borrow a trusted friend's phone or computer within the first 5 minutes and trigger "Lost Mode / Remote Lock" immediately:
   • For an iPhone, iPad, or Mac: Go directly to iCloud.com/find in any web browser. Sign in with your Apple Account (Apple allows access to iCloud.com/find without requiring a 2-factor verification code sent to your stolen device) and click Mark As Lost to immediately lock the screen, disable Apple Pay, and display a recovery message.
   • For an Android Phone, Tablet, or Chromebook: Go directly to google.com/android/find (Google Find My Device), sign in, and click Secure device to lock the screen with your PIN and sign out of Google Pay.
   • For a Windows Laptop: Go to account.microsoft.com/devices, select your laptop, and click Find my device -> Lock.
3. ** Niba terefone yaranyazwe mugihe idafunze (cyangwa niba umujura akubonye wanditse passcode yawe ya ecran), hita uhita "Remote Erase / Uruganda Wipe" ako kanya aho kuyifunga gusa **: Niba umujura azi passcode yawe yimibare 6 cyangwa agakomeza gukingura ecran, "Mode yatakaye" yonyine ntabwo izababuza gufungura terefone hamwe na passcode. Kuri iCloud.com/find cyangwa **google.com/android/findx
4. ** Amategeko akurikirana: Ntugahagarike umurongo wa selire yawe hamwe nu mutwara wawe kugeza NYUMA yohereje itegeko rya Remote Lock / Remote Erase **: Niba terefone yawe yibwe iri kuri data ya selire (4G / 5G) kure ya Wi-Fi hanyuma ugahamagara umushoferi wawe wa terefone mbere kugirango uhagarike SIM / eSIM, telefone ihita itakaza umurongo wa enterineti cyangwa ** ntuzigera wakira umurongo wa Remote ** cyangwa Remote. Ohereza iCloud.com/find cyangwa google.com/android/find gufunga / guhanagura itegeko ** ubanza **, tegereza iminota 2 (cyangwa wemeze ko ryatonze umurongo), hanyuma ** hanyuma ** hamagara umushoferi wawe wa terefone kugirango uhagarike SIM / eSIM hanyuma uhagarike terefone ya nimero 15 ya nimero ** IMEI numero **.
5. ** Injira kuri konte yawe yambere ya imeri (Gmail, Outlook, iCloud Mail, Proton) uhereye kubikoresho bisukuye, uhindure ijambo ryibanga, hanyuma ukande "Gusohoka mubindi byiciro byose" **: Laptop cyangwa terefone yibwe ifite kuki zinjira zinjira hamwe nibimenyetso bya OAuth byerekana imeri yawe, ububiko bwibicu, nuyobora ijambo ryibanga. Guhindura ijambo ryibanga hanyuma ukande ** Sohora kurubuga rwose hamwe na mobile mobile ** muri Google yawe (myaccount.google.com/security), Apple (account.apple.com), hamwe na Microsoft umutekano wibikoresho bya Microsoft uhita utesha agaciro ibimenyetso byabitswe bicaye kubikoresho byibwe.
6. ** Hamagara ishami ryuburiganya rya banki yawe hamwe nabatanga amakarita yinguzanyo kugirango uhagarike uburyo bwa banki igendanwa kandi ukureho ibimenyetso byerekana ikarita ya **

Decision flowchart: first-hour response to a stolen smartphone or laptop¶

flowchart TD
    Start["Smartphone or Laptop Stolen or Snatched"] --> Safety["Confirm Physical Safety: Do Not Chase Thief"]
    Safety --> UnlockedCheck{"Was the Device Snatched While UNLOCKED, or Could the Thief Know Your Passcode?"}
    UnlockedCheck -->|"Yes, Snatched Unlocked or Passcode Compromised"| ImmediateWipe["Go to iCloud.com/find or google.com/android/find FIRST: Trigger Remote Erase / Wipe Immediately"]
    UnlockedCheck -->|"No, Screen Was Locked with Strong Biometrics/Passcode and Full Disk Encryption"| RemoteLock["Go to iCloud.com/find, google.com/android/find, or account.microsoft.com/devices: Trigger Lost Mode / Remote Lock"]
    ImmediateWipe --> RevokeSessions["Log Into Primary Email, Apple/Google Account, and Password Manager: Change Passwords + Revoke All Active Session Tokens"]
    RemoteLock --> RevokeSessions
    RevokeSessions --> CarrierFreeze["Call Mobile Carrier: Suspend Physical SIM / eSIM Line, Port-Out Freeze, and Blacklist 15-Digit IMEI Number"]
    CarrierFreeze --> BankLock["Call Banks & Payment Apps (Zelle, Venmo, Cash App, Revolut, PayPal): Freeze Mobile Sessions & Revoke Digital Wallet Tokens"]
    BankLock --> PoliceReport["File Official Police Report Listing Device Serial Number and 15-Digit IMEI/MEID for Insurance & Carrier Blacklist"]

Step 1: Execute the exact Remote Lock and Remote Wipe protocol by operating system¶

How you lock or erase your stolen hardware, and whether you can reach the dashboard without having a 2-factor authentication SMS sent to the very phone that was just stolen, depends on your operating system:

Platform-by-platform remote lock, wipe, and 2FA-bypass reference¶

What if the thief put your iPhone or Android into "Airplane Mode" or turned it off?¶

Modern operating systems have closed the "Airplane Mode / Power Off" loophole: - On iOS 15 and newer: Even when a thief holds the side button and powers the iPhone completely OFF (or even after the battery dies for up to 24 hours, or after a remote wipe), the iPhone's Ultra Wideband (UWB) and Bluetooth Low Energy radio chips remain active in a low-power state. Whenever any other person's iPhone, iPad, or Mac walks within 10 to 30 meters (33 to 100 feet) of your powered-off stolen iPhone anywhere in the world, your phone silently pings Apple's encrypted Find My Crowd-Sourced Network and updates its exact GPS location on your iCloud.com/find map. - On Android 9+ with Google's Expanded Find My Device Network (and Samsung Offline Finding): Supported Android devices (such as Pixel 8/9 series and Galaxy S23/S24 series) similarly broadcast encrypted Bluetooth beacons to nearby Android devices even when offline or powered down.

Step 2: What to do if the thief saw your passcode ("Shoulder Surfing" recovery)¶

In major cities across the United Kingdom, the United States, Europe, and Latin America, organized criminal gangs stand behind victims in bars, trains, and coffee shops, film or watch the victim type their 6-digit iPhone or Android passcode, and then grab the phone out of the victim's hands.

Why a known passcode is so dangerous (And how Stolen Device Protection stops it)¶

• **If you ALREADY had Apple's "Stolen Device Protection" turned ON (Settings -> Face ID & Passcode -> Stolen Device Protection) **:
  • Introduced in iOS 17.3, Stolen Device Protection is a lifesaver: when your iPhone is away from familiar locations (like your home or workplace), the iPhone completely blocks your 6-digit numeric passcode from being used as a fallback for sensitive actions. Even if the thief knows your 6-digit passcode, they cannot view your saved iCloud Keychain / Passwords app vault, cannot turn off Lost Mode, cannot erase the phone, and cannot change your Apple Account password without passing a live Face ID / Touch ID biometric scan plus waiting through a mandatory 1-hour security delay followed by a second biometric scan.
• If you did NOT have Stolen Device Protection turned on (or if an unlocked Android/iPhone was snatched without biometric protection):
  • A thief who knows your 6-digit screen passcode can open Settings, tap your name, and tap "Change Password -> Forgot Password" using only your 6-digit screen passcode to reset your entire Apple Account password, turn off Find My iPhone, add their own Face ID, and open your saved password manager within 90 seconds.
  • Your Immediate Emergency Counter-Attack:
    1. Race to iCloud.com/find cyangwa google.com/android/find within the first 2 minutes and click "Erase This Device" (Remote Wipe) before the thief can open Settings.
    2. Check if the thief ALREADY changed your Apple Account password and locked you out: If you try to log in to account.apple.com and get "Incorrect Password" or see a recovery key you never created, call Apple Support immediately and simultaneously call your mobile carrier to deactivate your SIM/eSIM so the thief can no longer receive SMS verification codes from your bank.
    3. If your stolen phone held your saved passwords in Apple Passwords / iCloud Keychain or Google Password Manager: Assume the thief opened your password list using your screen passcode and photographed or exported your banking, email, and crypto passwords. Immediately use a clean computer to change the passwords on your top 10 critical accounts (Primary Email, Secondary Recovery Email, Checking/Savings Banks, Brokerage/Retirement Accounts, Venmo/PayPal/Cash App, Crypto Exchanges, and Amazon/Shopping accounts).

Step 3: Sever active login sessions, OAuth tokens, and SSH/API keys (Especially for stolen laptops)¶

When a laptop or smartphone is stolen, changing your account password alone is not always enough if the web service allows existing active session cookies or mobile app tokens to stay logged in for 30 days after a password change. You must explicitly revoke all active device sessions across your core digital hubs:

Checklist: Where to click "Sign Out of All Devices" in under 10 minutes¶

• **1. Google / Gmail / Google Workspace (myaccount.google.com/device-activity) **:
  • Kanda kuri terefone yibwe cyangwa mudasobwa igendanwa kurutonde rwibikoresho hanyuma ukande buto y'ubururu ** "Sohora" **. Noneho jya kuri myaccount.google.com/security, hindura ijambo ryibanga rya Google, hanyuma ugenzure ** 2-Intambwe yo Kugenzura -> Porogaramu Authenticator / Passkeys ** kugirango ukureho passkey yose iboshye gusa ibyuma byibwe.
• ** 2. Konti ya Apple / iCloud (account.apple.com) **:
  • Injira, uhindure ijambo ryibanga rya konte ya Apple, hanyuma uhitemo ** "Sohora muri mushakisha zose hamwe nibikoresho byose byinjiye muri konte yawe ya Apple." ** (** Iburira rikomeye **: Ntukore ** kanda * iCloud.com/find muri ** Uburyo bwatakaye ** cyangwa ** Gutegereza Erase ** iteka).
• ** 3. Konti ya Microsoft / Office 365 / OneDrive (account.microsoft.com/security) **:
  • Kanda ** Gucunga uko ninjira -> Unyandikishe ahantu hose **, ihatira mudasobwa zigendanwa zose za Windows, mushakisha, abakiriya ba Outlook, hamwe na porogaramu ya OneDrive guhagarika ibimenyetso byamasomo mu masaha 24.
• ** 4. Abacunga ijambo ryibanga (1Password, Bitwarden, Dashlane, Umuzamu, Passon Pass) **:
  • Injira kurubuga rwibanga rwumuyobozi wibanga muri mudasobwa isukuye, jya kuri ** Igenamiterere rya Konti -> Umutekano / Kwemerera Amasomo **, hanyuma ukande ** "Kwemerera Ibindi Byiciro Byose / Kwambura ibikoresho byose."
• ** 5. Itumanaho & Porogaramu mbonezamubano (WhatsApp, Ikimenyetso, Telegaramu, Ubunebwe, Ubwumvikane) **:
  • ** WhatsApp **: Umaze gukora SIM / eSIM isimbuye numero yawe ya terefone kuri terefone nshya hanyuma ukinjira muri WhatsApp, WhatsApp ** ihita isohora terefone yibwe ** (kuko WhatsApp yemerera terefone imwe y'ibanze kuri numero). Noneho uhite ujya Settings -> Linked Devices kuri terefone yawe nshya hanyuma usohokane na mudasobwa igendanwa yose.
  • ** Telegaramu & Ikimenyetso **: Fungura Settings -> Devices (Active Sessions) hanyuma ukande ** "Kurangiza Ibindi Byiciro Byose" ** kugirango uhanagure ubutumwa bwibanze kuri mudasobwa igendanwa cyangwa terefone.
• ** 6. Iterambere, Igicu, hamwe nibyangombwa (Kuri mudasobwa zigendanwa zibwe) **:
  • Niba mudasobwa igendanwa yibwe yarimo itumanaho rifite ibyangombwa bidafite ibanga cyangwa cashe, hita winjira muyindi mashini hanyuma uhagarike:
    • ** GitHub / GitLab SSH Urufunguzo & Tokens Yumuntu Yumuntu **: github.com/settings/keys na github.com/settings/tokens.
    • ** AWS / Google Igicu / Azure CLI Ibyangombwa **: Kuraho urufunguzo rwa IAM rwabitswe muri ~/.aws/credentials cyangwa ~/.config/gcloud.
    • ** Shyira hamwe VPN / Umurizo / Cloudflare Zero Icyizere **: Menyesha umukoresha wawe ** IT Umutekano / SOC Ifashayobora ako kanya ** kugirango bashobore gukuraho icyemezo cya MDM ya mudasobwa igendanwa, urufunguzo rwa node, na Okta / Entra ID.

Intambwe ya 4: Funga ikarita yawe ya SIM / eSIM hanyuma wandike urutonde rwa numero 15 ya IMEI¶

Tegereza kugeza utonze umurongo wa ** Remote ya ** cyangwa ** Erase ya kure ya ** kuri iCloud.com/find cyangwa google.com/android/find. Iri tegeko rikimara koherezwa, hamagara terefone yawe igendanwa iturutse kuri terefone yinshuti:

1. ** Irinde SIM Swap yumubiri muyindi telefone **:
   • Niba terefone yawe yibwe yarakoresheje ikarita ya ** nano-SIM ikarita ** idafite ** SIM PIN **, umujura arashobora gufungura SIM tray yuguruye, akinjiza SIM yawe muri terefone yaka idafunze, hanyuma ** agahita yakira ubutumwa bugufi bugufi bwanditse hamwe na terefone ** yoherejwe kuri numero yawe (harimo na kode ya banki 2FA), nubwo terefone yawe yibwe yari ifunze. Bwira uhagarariye abatwara abagenzi ** guhagarika umurongo wa selire **, guhagarika SIM / eSIM yibwe, hanyuma ushire ** Konti Port-Out Freeze ** kuri konte yawe.
2. ** Hindura numero yawe ya terefone kuri eSIM nshya cyangwa gusimbuza SIM yumubiri uyumunsi **:
   • Sura ububiko bwemewe bwogutwara mobile yawe hamwe nindangamuntu yawe yifoto kugirango utange ** gusimbuza eSIM cyangwa SIM ikarita yumubiri ** hamwe numero yawe ya terefone isanzwe, ikuraho burundu SIM / eSIM imbere muri terefone yibwe.
3. ** Ongeraho terefone yawe yibwe nimero 15 ya IMEI kurutonde rwa Global GSMA Blacklist **:
   • Shakisha terefone yawe ifite imibare 15 ** IMEI (Indangamuntu Yibikoresho Mpuzamahanga Mpuzamahanga) ** kurupapuro rwambere rwo kugurisha agasanduku kode ya barcode (ipima hafi santimetero 15 kuri 8, cyangwa 6 kuri 3), imbere account.apple.com -> Devices or google.com/android/find -> Device Info, or on your carrier bill. Give that 15-digit IMEI to your carrier to blacklist on the Global GSMA IMEI Database and include it on your police report.

Step 5: Financial and identity-theft containment (When a thief accessed your unlocked phone)¶

If a thief had access to your unlocked phone, assume they searched your Photos, Notes, and Mail apps for IDs, passwords, and crypto seed phrases:

• ** 1. Hagarika raporo yinguzanyo yawe mubiro bitatu byingenzi byinguzanyo (100% Ubuntu) **: Shyira ako kanya ** Umutekano uhagarika ** kuri ** Equifax ** (equifax.com/personal/credit-report-services), ** Umunyamerika ** (experian.com/freeze), na ** TransUnion ** (transunion.com/credit-freeze) (or CIFAS Protective Registration in the UK / Equifax & TransUnion Canada) to block thieves from opening loans or credit cards in your name.
• 2. Revoke Peer-to-Peer Payment Apps (Venmo, Cash App, Zelle, PayPal, Revolut, Monzo, Wise): Log in to your payment apps on a web browser, change passwords/PINs, remove linked debit cards temporarily, and log out all active devices.
• 3. Sweep Cryptocurrency Wallets if a Seed Phrase Was Stored on the Device: If a photo or note containing a 12- or 24-word BIP-39 seed phrase was on the device, create a brand-new wallet on a clean device immediately and transfer 100 percent of your assets to the new wallet address today.
• 4. Replace Your Authenticator App (2FA TOTP Codes): Restore your cloud-synced TOTP tokens on your replacement phone (or use your printed 8-digit 2FA Backup Recovery Codes to register a new authenticator app and delete the old device's token).
• 5. File an Official Police Report and Check Credit Card "Cell Phone Protection" Insurance: File a police report listing the make, model, Serial Number, and 15-digit IMEI. If you pay your monthly wireless bill with a qualifying credit card (such as Chase Freedom Flex, Wells Fargo Autograph, Capital One Venture X, or Amex Platinum), submit a claim for 600 to 1,000 USD in built-in Cell Phone Theft Insurance.

International guidance: United Kingdom, Canada, and Australia¶

• **In the United Kingdom (Bank 159, Polisi 101, na Immobilise.com) **: Gutiza terefone iyo ari yo yose hanyuma ukande 159. Menyesha ubujura kuri polisi kuri 101 ** hamwe IMEI yawe yimibare 15 kugirango ubone nomero ** yerekana ibyaha ** (bisabwa na EE, O2, Vodafone, na Batatu kugirango wandike telefone kandi ubwishingizi butunganijwe) hanyuma ushireho igikoresho kuri Immobilise.com.
• ** Muri Kanada.devicecheck.ca.
• ** Muri Ositaraliya (AMTA IMEI Guhagarika na IDCARE) **: Baza uwaguhaye telefone igendanwa (Telstra, Optus, Vodafone / TPG) kuri ** Service Bar ** hamwe na ** AMTA IMEI Handset Block ** kumurongo wose wa Australiya (amta.org.au). Niba amafoto y'uruhushya rwo gutwara rwo muri Ositaraliya, ikarita ya Medicare, cyangwa pasiporo yari ku gikoresho, hamagara ** IDCARE kuri 1800 595 160 ** (idcare.org) kuri gahunda yubusa-gahunda yo gusimbuza.

Ibibazo bikunze kubazwa¶

Inkomoko yagenzuwe¶

• Umutekano wa Apple Platform & Inkunga ya Apple (Amerika): * Niba iPhone yawe, iPad, cyangwa Mac Yatakaye cyangwa Yibwe (support.apple.com/HT201472 & HT204756), Kubijyanye no Kurinda Ibikoresho Byibwe kuri iPhone, Gukora Gufunga Ubwubatsi, hamwe na Enclave Yizewe Cryptographic Erase Ibisobanuro *.
• Google Android Umutekano & Ubufasha (Amerika): * Shakisha, Gufunga, cyangwa Gusiba Igikoresho cya Android cyatakaye (support.google.com/android/answer/6160491), Kurinda Uruganda Kurinda (FRP), na Google Shakisha Igikoresho cyanjye Imbaga-Sourced Offline Network *.
• Ikigo gishinzwe umutekano n’ibikorwa remezo (CISA) & komisiyo ishinzwe ubucuruzi n’ubucuruzi (FTC, Amerika): * Kurinda ibikoresho bigendanwa byubujura n’ubwumvikane buke, inama z’umuguzi kuri telefone yatakaye cyangwa yibwe (consumer.ftc.gov), n'Indangamuntu.gov Inguzanyo yo guhagarika inguzanyo *.
• Ikigo cy’igihugu gishinzwe umutekano wa cyber (NCSC), Polisi ya Metropolitan, no guhagarika uburiganya mu Bwongereza (Ubwongereza): * Amabwiriza ya NCSC ku bijyanye n’ibikoresho byatakaye cyangwa byibwe, Hagarika uburiganya mu Bwongereza 159 Umurongo wa telefone wihutirwa, kandi Immobilise.com Kwiyandikisha ku mutungo w’igihugu mu Bwongereza *.
• Ishyirahamwe ry’itumanaho rya Wireless ryo muri Kanada (CWTA) & Centre yo Kurwanya Uburiganya muri Kanada (Kanada):devicecheck.ca) hamwe n’amabwiriza yo gukumira uburiganya *.
• Ishyirahamwe ryitumanaho rya terefone igendanwa rya Ositaraliya (AMTA) & IDCARE (Ositaraliya): * AMTA Yatakaye cyangwa Yibwe Terefone IMEI yo guhagarika inzira (amta.org.au) na IDCARE National Cyber ​​& Indangamuntu Kugarura Igisubizo (idcare.org) *.

Kuyobora¶

• Guhinduranya SIM hamwe no kwiba nimero igendanwa
• Ijambobanga ryibanga ryibanga no kugarura ibintu byihutirwa
• Kurenga kuri konti ya banki no kugarura insinga zitemewe
• Kuroba no kubangamira imeri cyangwa konte mbonezamubano
• Identity theft response and credit freeze