What to Do If Your Android Phone Is Stolen: A Complete Recovery Checklist

A stolen phone is not really about the phone. The hardware is replaceable and insured or not, but either way it is a known cost. What is not a known cost is everything the phone can still reach: your email, your bank, your messages, and the second factor that protects all of it.

The next hour decides how much of that you keep. Work through this in order — the sequence matters more than any individual step, because each one narrows what the next person can do.

First 5 minutes

Do not chase them. This is the most important line in this article. A phone is worth a few hundred dollars. Confronting someone who has just committed a crime, in a place they chose, is not a trade worth making. People have been seriously hurt recovering devices worth less than their hospital bill.

Call the phone from another device. Occasionally it was not stolen at all. Rule that out first — it takes fifteen seconds and saves you from cancelling everything over a phone that is under a car seat.

Locate and lock it. Android's device-finding service (Find Hub, formerly Find My Device) lets you locate the phone, play a sound, lock it remotely and display a message with a contact number on the lock screen. Sign in from any browser or a friend's device. Lock it now — do not erase yet, because erasing usually ends your ability to locate it.

Note the location and the time. Screenshot it. Locations get stale fast, and a screenshot with a timestamp is worth far more to the police than your recollection an hour later.

Next 30 minutes

Change your Google account password first. Not your bank — your Google account. It is the master key: it can reset other passwords, it holds your saved credentials, and it controls the device itself. Doing this first shrinks everything that follows. Sign out all other sessions while you are there.

Then your email, if it is not the same account. Email is where password resets land, which makes it the second master key.

Call your carrier and block the SIM. This stops calls and texts being made at your expense, and — more importantly — stops SMS one-time codes being received by whoever has the phone. Ask them to blacklist the IMEI at the same time; a blacklisted handset is much harder to sell or use on local networks.

Secure your banking and payment apps. Change passwords, and where possible sign out remote sessions. If you use mobile wallets, suspend the cards through the issuer's app or website rather than relying on the phone being locked.

Change passwords on messaging apps, and check for active linked sessions — messaging apps commonly allow a desktop or web session that survives losing the handset.

Next 24 hours

File a police report. Bring the IMEI (on the box, on your carrier account, or in your Google account's device list), the last known location screenshot, the time it happened and where. A report is what makes an insurance claim possible and is sometimes what makes a recovery possible.

Replace the SIM so you get your number back. Your number is a recovery channel for many accounts, and leaving it dead is its own risk.

Review account activity on the accounts that matter — sign-in history, new devices, forwarding rules on your email. Mail forwarding rules are a favourite trick and are easy to miss.

Consider erasing the device remotely once you have accepted it is not coming back. Do this last, deliberately: it protects your data but ends tracking.

What almost nobody has, and wishes they did

Work through that list and you will notice something. Every step is about the device — where it is, whether it is locked, whether it can be sold. Not one of them tells you anything about the person.

That information does exist, briefly. In the minutes after a phone is taken, whoever has it will usually try the lock screen. At that moment they are holding the device, looking directly into the front camera, in a specific place, at a specific time.

If nothing is set up to capture that, the moment passes and is gone forever. If something is, you get a photo, coordinates and a timestamp in your inbox — the difference between a police report with no leads and one with a picture attached.

That has to be configured before the theft. There is no way to go back and collect it. Our setup walkthrough covers it, and takes about five minutes.

Prepare now, in ten minutes

If you are reading this and your phone is still in your hand, do these today:

1. Confirm the device-finding service is enabled and you can actually sign in to it.
2. Set a strong screen lock — six digits or more, biometrics on top.
3. Write your IMEI down somewhere that is not your phone.
4. Turn on an intruder-detection layer so a failed unlock produces evidence.
5. Leave mobile data on when you go out. A phone with no connection cannot report anything.

Ten minutes now is worth more than any amount of effort afterwards.