PhoneThefts

Enable iCloud Backup (iPhone) or Google Backup (Android) so your photos, contacts, and app data are always saved. This means even if your phone is gone forever, you won't lose your memories or important information.

Pro tips:

• Check your backup is actually working — go to settings and verify the last backup date
• Make sure you have enough cloud storage (upgrade if needed, it's worth it)
• Consider backing up to a computer periodically for an extra safety net
• WhatsApp has its own backup setting — enable it separately

A complete backup means when you get a new phone, you will not need to load everything from scratch.

Make sure Find My iPhone or Find My Device is turned on and configured. This is your most powerful tool if your phone is ever stolen.

What Find My lets you do:

• See your phone's real-time location on a map
• Play a sound (even if on silent)
• Lock the device with a custom message
• Erase all data remotely as a last resort

Important: Test it once right now to make sure it actually works. Many people discover it wasn't properly enabled only after their phone is stolen.

Use an alphanumeric passcode, or at least a 6 digit pin along with enabling biometric authentication (Face ID or fingerprint).

Lock screen strength:

1. Alphanumeric passcode (strongest, highly recommended)
2. 6-digit PIN
3. 4-digit PIN - not recommended
4. Pattern lock - not recommended

In many theft cases, thieves have been observed to shoulder-surf, or even set up specific situations (e.g. "like my online page, I'll show you" before triggering the passcode on the screen via button press) to obtain your lock screen passcode/pattern. In some instances, they have used Rayban glasses to record the input. Hence longer entry and biometric authentication at a minimum is recommended.

Best practices:

• Avoid obvious PINs: 1234, 0000, 1111, your birth year
• Don't use the same PIN as your banking app
• Set auto-lock settings to 30 seconds or 1 minute maximum

Why this matters: A strong lock screen buys you time. Even if a thief has your phone, they can't access your accounts, photos, or payment apps without getting past the lock. Most opportunistic thieves will give up on a well-locked phone.

Even if a thief gets past your lock screen, per-app biometric locks add another barrier to your most sensitive apps. Both iOS and Android offer ways to require authentication before opening specific apps.

Priority apps to lock:

1. Banking and payment apps (Monzo, Revolut, PayPal, Apple Pay settings)
2. Email (access = password resets for everything)
3. Messaging apps (WhatsApp, Signal, Telegram)
4. Cloud storage (Google Drive, iCloud, Dropbox)
5. Password manager
6. Photos (may contain ID documents or sensitive info)

Why this matters: Thieves who shoulder-surf your passcode can unlock your phone, but per-app biometric locks stop them from accessing individual apps. Biometrics can't be observed like a PIN — your face or fingerprint isn't something a thief can memorise from watching you on the Tube.

In your Notes or Photos you may have information stored such as:

• Passport documents or identifiers
• National insurance numbers
• Passwords for critical accounts

With these, the thief can use them to log into other accounts or use the sensitive documents to apply for loans or credit cards in your name.

Recommended steps:

• Search in your Photos or Notes for instances of these when you may have saved them
• It's highly recommended that you remove them
• If you must store them, use the device settings to lock the item

Enable 2FA on all important accounts. This means even if someone has your password, they need a second verification step to log in.

Types of 2FA (best to worst):

1. Hardware security key (YubiKey) — most secure
2. Authenticator app (Authy, Google Authenticator, Microsoft Authenticator)
3. Push notifications (app-based approval)
4. SMS codes — better than nothing, but vulnerable if SIM is compromised

Why authenticator apps beat SMS:

• SMS can be intercepted via SIM swapping
• If your SIM is in the thief's hands, they receive your codes
• Authenticator apps are tied to the device and protected by your phone's lock

Critical setup steps:

• Use an authenticator app that supports cloud backup (Authy, Microsoft Authenticator)
• Save backup/recovery codes somewhere safe (not on your phone!)
• Print backup codes and store them with important documents
• Enable 2FA on: email, banking, social media, cloud storage, password manager

Pro tip: If you use Authy, enable multi-device so you can access codes from a computer if your phone is stolen.

Your IMEI (International Mobile Equipment Identity) is a unique 15-digit number that identifies your specific handset. It's like a fingerprint for your phone.

How to find your IMEI:

• Dial *#06# on your phone (works on all phones)
• iPhone: Settings > General > About > scroll to IMEI
• Android: Settings > About Phone > IMEI
• Check the original box your phone came in
• Check your carrier account online

Where to store it:

• Write it down and keep it with important documents
• Email it to yourself with a clear subject line
• Take a screenshot and save it to cloud storage
• Add it to a secure note in your password manager

Why you need it:

• Police require it to log a theft report
• Your carrier uses it to block the phone on all networks
• Insurance companies need it to process claims
• It can help identify your phone if recovered
• Buyers can check if a second-hand phone is stolen using the IMEI

Do this right now — it takes 30 seconds and could save you hours of stress later.

A password manager generates and stores unique, complex passwords for every account. Even if someone gains access to your phone, they'd need your master password to access anything.

Recommended password managers:

• 1Password — excellent UI, family plans, travel mode
• Bitwarden — open source, free tier available, very secure
• Apple Keychain — built into iPhone, seamless but Apple-only
• Google Password Manager — built into Chrome/Android

Why this protects you after theft:

• No passwords stored in plain text on your device
• Each account has a unique password (one breach doesn't cascade)
• Auto-lock means the vault closes when your phone locks
• You can quickly identify which accounts to secure from another device

Getting started:

1. Choose a password manager and install it
2. Set a strong, memorable master password (passphrase works well)
3. Start by adding your most important accounts
4. Use the password generator for new passwords
5. Enable biometric unlock for convenience

The golden rule: Your master password should be something you can remember but nobody could guess. A random phrase like "correct-horse-battery-staple" is far stronger than "P@ssw0rd123".

A SIM PIN prevents anyone from using your SIM card in another device without entering a code. This is often a forgotten security feature.

Why it matters:

• Without a SIM PIN, a thief can pop your SIM into another phone
• They can then receive your calls, texts, and 2FA SMS codes
• They can impersonate you to your contacts
• They can potentially reset passwords on accounts using SMS verification

How to set it up:

• iPhone: Settings > Mobile Data > SIM PIN > toggle on
• Android: Settings > Security > SIM card lock > Lock SIM card

Important notes:

• The default SIM PIN is usually 1234 or 0000 — they know to try these, so change it
• If you enter the PIN wrong 3 times, you'll need to obtain a PUK code from your carrier
• Write down your PUK code and store it safely (your carrier can provide it)
• You'll need to enter the SIM PIN each time you restart your phone

Warning: Don't forget your SIM PIN! Getting locked out requires calling your carrier for a PUK code. But this minor inconvenience is worth the security benefit.

Check your banking app security settings:

Most banking apps have their own security layer independent of your phone's lock screen. Where they're offered, look to enable these. You can also ask your bank to confirm what else you can do to secure your account in such a case.

Enable biometrics and app passcodes:

• Turn on Face ID / fingerprint authentication for every banking and financial app (Monzo, Starling, Barclays, HSBC, Revolut, etc.)
• Ensure the app requires biometric or passcode authentication every time it's opened, not just after a timeout
• Use a unique app-specific PIN that is different from your phone's lock screen PIN
• If your bank offers "app lock on close" or "require authentication on every open," enable it

Why this matters: If a thief has already observed your lock screen PIN (shoulder-surfing), a separate biometric or passcode requirement on your banking app is your last line of defence. Without it, they have immediate access to your money.

Review and lower bank transfer limits:

• Check your daily transfer limits for bank transfers (Faster Payments, CHAPS, international transfers)
• Lower them to the minimum you realistically need for day-to-day use — you can always temporarily raise them when needed
• Set lower limits for new payees specifically (most banks allow a separate, lower limit for first-time recipients)
• Enable transaction notifications so you're alerted immediately to any transfer
• If your bank supports it, enable a "cooling off" period for new payees (e.g. 24-hour delay before first payment goes through)

Why this matters: Thieves who gain access to your banking app will attempt to transfer as much money as possible, as quickly as possible — often to multiple new payees in rapid succession. Low transfer limits cap the damage and buy you time to freeze the account. A £250 new payee limit means they can't drain your account in one go, even if they get in.

Additional financial app checks:

• Disable "remember payee" features where possible
• Turn off any "trusted device" settings that skip authentication
• Review which devices are registered/trusted in your banking app and remove any you don't recognise
• Check if your bank offers a "confirmation of payee" feature and ensure it's enabled

Register with Immobilise (UK National Property Register):

Immobilise is the UK's largest free register of possession ownership. It's used by every police force in the UK to trace and return recovered property to its rightful owner. Registering your phone and other valuables takes just a few minutes and significantly increases the chance of getting them back if stolen.

• Visit immobilise.com and create a free account
• Register your phone using its IMEI number (dial *#06# to find it, or check Settings > About Phone)
• Add other valuables too — laptops, tablets, cameras, bikes, and anything with a serial number
• Upload photos and proof of purchase where possible
• Keep your records up to date when you buy new devices or sell old ones

Why this matters: When police recover stolen property, they check it against the Immobilise database. If your device is registered, they can identify you as the owner and return it. Without registration, recovered items often can't be reunited with their owners — even when police have them in hand.

Tips:

• Note down your IMEI number separately (not just on the phone itself) so you have it ready if your phone is stolen
• Set a reminder to update your registrations when you get a new device
• You can also mark items as stolen on Immobilise, which alerts second-hand dealers and recyclers who check the database before buying

Phone insurance gives you peace of mind and a faster path to replacement. Standard warranties and basic plans typically only cover damage — make sure your plan explicitly includes theft and loss cover, not just accidental damage.

Third-party insurance providers (WIP):

• Gadget Cover
• Protect Your Bubble
• Loveit Coverit
• So-Sure
• Three, EE, Vodafone, O2 (carrier add-ons)

What to look for in a policy:

• Explicit theft and loss cover (not just accidental damage)
• Low excess/deductible
• Fast replacement turnaround (next-day is ideal)
• Worldwide cover if you travel
• No requirement to prove forced entry (important for snatch thefts)

Tips:

• Check if your bank account or credit card already includes phone insurance
• Some home contents insurance policies cover phones outside the home — check your existing cover first
• Keep your proof of purchase and IMEI number stored safely — you'll need both to claim

Most phone thefts are opportunistic — snatched from hands, tables, or open bags in busy areas. A little awareness goes a long way.

High-risk situations:

• Using your phone while walking on a busy street
• Placing your phone on a café or restaurant table
• Texting near the doors of public transport (snatch-and-run)
• Having your phone visible in an open bag or back pocket
• Using your phone late at night in unfamiliar areas

Simple habits that help:

• Keep your phone in a zipped inner pocket when not in use
• Use it with your back to a wall in crowded areas
• Hold it firmly with both hands in busy places
• Don't leave it unattended on tables, gym equipment, or bar tops
• Be extra cautious around bikes and e-scooters, which often used for snatch and grab

On public transport:

• Don't use your phone right by the doors (thieves grab and run as doors close)
• Keep it in your pocket when standing near exits
• Be aware of people standing unusually close

At events and nightlife:

• Phone theft spikes at festivals, concerts, and nightclubs
• Use a crossbody bag or running belt for secure storage
• Avoid pulling your phone out in dense crowds

Check the accessories list for recommended accessories to help prevent theft.

If your phone is stolen, it can be a devastating experience. Make sure you know what to do in this situation, and even practice it once.

The most common problem is you can rely a lot on your device already for information, so you may not even remember the numbers to contact. To add to that, you don't have your phone to pay so you're unable to travel.

Store information of information that can help:

• Phone numbers of who you can contact in such a situation whom could help you lock/unlock accounts, contact banks, provide other info or other steps. This might be phone number of a significant other or a family member that you can call from another person's phone
• Phone numbers of important services (bank, insurance, etc) so you can call them if needed

Run through the steps if your device was stolen:

• If it's stolen locked/unlocked - what would you do and who would you contact? Try to think how you'd be able to proceed with the steps on the PhoneThefts stolen checklist. Also consider if you're not with anybody you know or in another country
• In the case of them obtaining your pin code, try to simulate the situation yourself. Use a face covering to access the device using a pin code. What can you perform and which information can you access?