A stolen phone can expose much more than the handset itself when banking, email and authentication services are linked to it.
A stolen cellphone should be treated as an account-security incident as well as a loss of property, particularly when the device is linked to banking, email and authentication services. Three actions deserve immediate attention: remotely lock the handset, suspend the SIM and contact the bank through an official fraud channel. SABRIC’s fraud guidance explains that control of a mobile number can assist criminals who already have compromised banking credentials, including through interception of verification messages and one-time passwords.
The mobile network should be contacted promptly to suspend the stolen SIM and begin the handset-blacklisting process, which prevents the device from connecting to South African mobile networks through its IMEI number. Procedures differ between providers, which means customers should follow the instructions from their own network rather than assume the process is identical everywhere. MTN’s current stolen-device guidance directs customers to suspend the SIM, blacklist the handset and report the theft to police, while Vodacom’s phone and SIM security information sets out the information required for blacklisting, including the IMEI, device details and customer identification.
The bank should also be contacted through the telephone number or fraud channel published on its official website. Customers should report that the handset is no longer in their possession and follow the bank’s instructions on the banking profile, linked device, cards or payment functions. As one example, Standard Bank advises customers with a lost or stolen cellphone to report the device immediately and unlink it from the digital banking profile.
iPhone owners can mark a stolen device as lost through Find My or iCloud.com/find, while Android owners can locate, secure or erase an eligible device through Google Find Hub. Apple’s current stolen-device guidance warns owners not to place personal contact information on the Lost Mode screen when the device was stolen, as criminals could exploit those details in follow-up social-engineering attempts. Apple also advises owners not to remove a stolen iPhone from Find My, even after a remote erase, because doing so removes Activation Lock; Google Find Hub provides corresponding options to locate, secure or factory-reset supported Android devices.
Primary email and other important online accounts should be reviewed once the immediate phone, SIM and banking steps have been dealt with. Signed-in devices and security methods must be reviewed because an email account can receive password-reset messages for other services; Google, for example, allows an account holder to sign out a missing device and remove a passkey linked to a lost or stolen handset. Unfamiliar sessions, recovery details or security changes should be dealt with through the provider’s official account settings rather than through links received by SMS, email or messaging apps.
Follow-up contact after a theft also warrants caution. Apple warns that it does not contact customers to announce that a stolen iPhone or iPad has been found, and advises users never to disclose a device passcode, password or verification code to someone making such a claim. Once the handset, SIM, banking profile and main online accounts have been secured, any police report, insurance claim and replacement process can be handled according to the requirements of the relevant network or insurer.
Liz Thorne
Naomi Roebert
Liz Thorne
Mariana Balt
Comments ()