My Parents Are Aging
Menu

First-hour response

Parent's Phone Is Lost or Stolen: Protect the Accounts First

A lost phone is annoying. A lost phone that still has the banking app, the password manager, and the "remember me" logins on it is a financial emergency. For an older parent, the phone is often the key to everything: bank, Medicare, email, the password vault. If it's gone, the accounts are at risk until you act. This guide is the first-hour plan, in order, because order matters.

Last reviewed: 2026-08-09 Freshness: updated as things change Reading time: 6 minutes

The short version: a missing phone means assume the worst for the first hour. Do these in order: (1) lock or erase the phone remotely with Find My iPhone or Find Hub (Google's device finder, formerly called Find My Device), (2) change the email password first, because email is how every other password gets reset, (3) check the bank and credit card apps for new activity and change those passwords too, (4) call the carrier and report the phone lost or stolen so the SIM card dies, and (5) if you find new charges or logins you did not make, report identity theft at identitytheft.gov and freeze the credit. Then look for the phone with the account's location feature, calmly, because a phone left in a coat pocket is a lot more common than a phone stolen for its data.

Why the phone matters more than the wallet

Most older adults carry a device that can unlock every account they own. Banking apps stay logged in. Email stays open. The password vault, if there is one, is right there on the home screen. A thief with a phone can request password resets, read the codes, and drain accounts before the owner even notices the phone is gone. That is why the order of steps matters: lock the device, then kill the account keys, then call the carrier.

It is also why the preparation steps at the bottom of this page matter more than the recovery steps. A phone with a lock screen, Find My enabled, and backups turned on turns a crisis into a nuisance.

Step 1: Lock or erase it remotely

Do this from any computer, tablet, or family member's phone. Both platforms make it free and fast:

  • iPhone or iPad: use Apple's Find My on the web (icloud.com/find) or the Find My app. Mark the device as Lost, which locks it and shows a message with a contact number. Only use Erase if the phone held sensitive data and you have given up on finding it; erasing removes the location tracking ability.
  • Android: use Find Hub (Google's device finder, formerly Find My Device) from any browser signed into the same Google account. Play a sound, secure the device, or erase it remotely.

If the phone is only misplaced, Play Sound or the Find My beep will usually end the search in minutes. The iPhone guide and Android guide cover where these settings live if they were never turned on.

Step 2: Change the email password first

Email is the master key. Almost every service resets passwords by sending a code to email, so a thief with the email app can take over everything else. This is the account to change first, before the bank, before anything.

  1. Sign in to the parent's email from a trusted computer or a second device. If the phone was still logged in, change the password now so the old session dies.
  2. Check for new sign-ins in the account's security settings and sign out of the lost device if the option exists.
  3. Then change the bank, credit card, and payment-app passwords, one at a time, starting with anything that had "remember me" or a saved password on the phone.

This is also the moment the responsible password setup proves its worth: if the family keeps the passwords in a vault, changing them takes minutes instead of an afternoon of guessing.

Step 3: Check the money accounts today

Open the bank, credit card, and payment apps on a trusted device and look at recent activity. You are looking for small test charges, new payees, or transfers you do not recognize. If anything looks wrong:

  • Call the bank or card issuer from a number you look up yourself, not from a number in a text or email. The verify-independently rule applies to recovery calls too.
  • Report the specific charges and ask them to lock the card or account.
  • Keep a list of what you reported and when, because you will need it for the identity-theft report if charges keep appearing.

Step 4: Call the carrier and kill the SIM

Report the phone lost or stolen to the mobile carrier and ask them to suspend or deactivate the line. This stops two things: calls and texts going to a stranger, and SMS codes being used to reset passwords. Ask specifically about SIM-swap protection while you are on the call, since that is the technique thieves use to take over a number entirely. The carrier can also confirm whether the phone itself can be blocked by its IMEI so it cannot be resold for parts or calls.

Step 5: Report identity theft if it happened

If you find new accounts, charges, or logins you did not make, the recovery has a dedicated track. The FTC's identitytheft.gov walks you through a step-by-step recovery plan and generates the forms you need, and the FTC identity-theft explainer covers the basics in plain language. Place a credit freeze at the three bureaus (it is free and does not hurt the parent's credit score), and file a report with the FTC if you confirm misuse. The compromised-account guide has the same 60-minute structure for the account side of this mess.

The preparation that prevents the panic

Thirty minutes of setup now turns a lost phone from a security incident into a nuisance. Do these with your parent in the same visit where you simplify the phone:

  • A lock screen that is actually on. PIN, pattern, or fingerprint. No lock screen means no reason to rush.
  • Find My turned on for iPhone and Find Hub (formerly Find My Device) for Android, with the parent's own account, and confirm you can see the device from your own phone.
  • Backups on. iCloud backup or Google backup, so an erase loses no photos or contacts. Test that it ran recently.
  • Two-factor codes in a safe place. If the parent uses a password vault or an authenticator app, write the recovery codes down and keep them somewhere safe, because a lost phone can also mean lost access to the vault. The vault guide covers this exact problem.
  • Contact numbers written down. Carrier support, bank fraud line, and your own number, on paper. A phone emergency is the wrong time to discover the parent does not know the bank's number by heart.

Related guides

Sources & verification

This page follows the evidence hierarchy in our editorial policy, preferring official platform and government sources for device and recovery guidance. Reviewed 2026-08-09:

Found an error? Report it: we log and correct material mistakes publicly.