The device is the cheapest thing you lose. What a thief is buying with your phone is a set of keys: the inbox that resets every other password, the banking app already logged in, the payment wallet with a balance, the text messages that carry your verification codes. The replacement handset is a line item. The access is the emergency.
Speed matters more than completeness in the first hour, and order matters more than speed. Doing the right five things in the wrong sequence can leave the door open while you are busy closing a window. This checklist is written for the United States, where the carriers, the payment rails and the agencies you have to notify all work in ways a general guide will get wrong.
It is also written with a spare device in mind, because that is the single preparation that turns a crisis into an inconvenience — and one way to fund one without touching the monthly budget is an app such as I am Beezy, where you view content and each view generates earnings paid to your local payment method.
What is a phone thief actually after?
Understanding the target tells you the order of the checklist. Two things are worth stealing on a modern phone, and neither is the phone.
The inbox is the master key
Almost every account you own will send a password reset to your email address. Whoever controls the inbox controls the rest, which is why the email password is the first thing to change and why you change it from a different device, not from a browser you happen to be logged into. Text messages are the second key, because a great many services still send verification codes by SMS — and those arrive on the SIM, not on the handset. That is the reason the carrier call comes before almost everything else.
The money apps are the immediate payday
Payment wallets carry a balance a thief can move at once, and instant rails are instant for everyone. The Federal Reserve has operated FedNow, a public instant payment rail available around the clock, since 20 July 2023, and Zelle settles between banks from inside your existing banking app. Treat any instant transfer as cash: once it has gone, recovering it is a dispute, not a reversal. Venmo, Cash App and PayPal hold balances and can move them out. Those are the apps to lock first, before the credit cards, because a card charge can be disputed and a moved balance is harder to chase.
The first hour: five calls in the right order
Borrow a phone or use a computer. Work through these five in sequence and do not skip ahead, because each one closes a door the next one depends on.
Carrier, then email, then money
Call your carrier first and ask for two distinct things: suspend the line, and report the device by its IMEI so it can be blocked. The United States has only three physical mobile networks — Verizon, AT&T and T-Mobile — and every other brand, from Mint Mobile and Cricket to Visible, Boost, Google Fi, Metro and Consumer Cellular, rents capacity on one of them. That matters when you look up who to call: your provider is whoever bills you, not the network on the signal bars. Second, change the email password from a device you trust. Third, lock the payment wallets. Fourth, call the bank. Fifth, use the manufacturer's find-my-device service to lock the handset and, when you have given up on recovery, erase it remotely.
What to say to the bank
Ask for three specific things rather than reporting the theft in general terms: freeze card-not-present transactions, remove the stolen device from the list of trusted devices, and change the verification channel away from the compromised number. There is no IBAN in the United States: an account is identified by a routing number and an account number, both of which appear on any check and inside most banking apps. Someone holding both can set up an ACH debit, which is the rail behind recurring payments — so ask the bank explicitly whether any new debit authorisation has been created in the last twenty-four hours.
| Order | Who you contact | What you ask for exactly |
|---|---|---|
| 1 | Your mobile provider | Suspend the line and block the device by IMEI |
| 2 | Your email provider | New password and sign out of all sessions |
| 3 | Payment wallets | Lock the account and stop instant transfers |
| 4 | Your bank or credit union | Freeze the card, drop the trusted device, check new ACH authorisations |
| 5 | Device maker's find-my service | Lock the handset, then erase remotely |
| 6 | Local police | A report number, needed for disputes and insurance |
Which accounts does a stolen phone unlock?
More than most people expect, and the ones people forget are the ones that hurt a retired household in particular.
The list nobody writes down until it is too late
Email and cloud storage. Banking and credit union apps. Payment wallets. The brokerage or retirement account. Your Social Security account, where direct deposit details are held. Your Medicare account. The pharmacy app that holds prescriptions. The utility and insurance portals with saved payment methods. Any subscription with a stored card. Write that list now, on paper, and keep it somewhere other than your phone. Working from a written list beats working from memory at the exact moment memory is least reliable.
Who actually holds your money
The FDIC listed 4,254 active insured institutions in the United States on 31 March 2026, and not every app that holds your money is one of them. Ally Bank, Varo Bank, N.A. and USAA Federal Savings Bank hold their own charters; Chime, SoFi and Cash App distribute accounts opened at a partner bank. When you report a compromise, you need to know which institution actually holds the deposit, because that is who investigates and who answers for the balance. Look it up in a calm moment and write the answer on the same sheet of paper.
Paying for a spare device with I am Beezy
The single change that makes all of the above easy is a cheap second phone or an old handset kept charged at home, holding your recovery codes and nothing else. The obstacle is rarely the idea, it is the outlay — and I am Beezy is one way to cover it without moving anything in the monthly budget.
What it is and what it realistically covers
You view content — videos, articles, advertising — and each view generates earnings paid to your local payment method. The reference range is 5 to 15 euros a day; at the Federal Reserve H.10 rate of 1 EUR to 1.1519 USD on 31 July 2026, that is roughly $5.75 to $17.30 a day. Aimed at a specific purchase — a basic prepaid handset, a hardware security key, a year of a password manager — that is a target you can name and reach rather than an abstract cushion.
What to put on the spare device
Not a copy of your life. Your printed recovery codes, an authenticator app for the accounts that support one, the phone numbers of your bank and carrier, and nothing else. No email account signed in, no payment wallet, no saved cards. A spare that is itself a second target defeats the purpose. Keep it in a drawer, charged, and check it twice a year.
The first week: freezes, disputes and the agencies to notify
Once the immediate doors are shut, the work shifts to preventing accounts being opened in your name and to protecting the payments you depend on.
Credit bureaus and the federal reporting site
Contact each of the three credit bureaus — Equifax, Experian and TransUnion — separately. A fraud alert warns lenders to take extra verification steps; a security freeze goes further and blocks new credit being opened until you lift it. Terms and durations change, so read each bureau's own page rather than a summary. In parallel, file a report with the Federal Trade Commission at IdentityTheft.gov, which produces a recovery plan and a document that banks and lenders accept. If a financial company will not engage, the Consumer Financial Protection Bureau takes consumer complaints against them.
Social Security, Medicare and the payments that must not be diverted
For a retired household this is the part that matters most, because the risk is not only fraud, it is interruption. Contact the Social Security Administration to confirm your direct deposit details are unchanged, and secure your online account with a new password from a trusted device. Do the same for Medicare, where your number is as sensitive as a card number. Medicare Part B costs a standard premium of $202.90 a month in 2026 with an annual deductible of $283, and for many people that premium is deducted directly from a Social Security payment — which is exactly why anyone tampering with your direct deposit affects both at once. Medicaid, if it applies, is administered by your state, so the contact point is your state agency rather than a federal one.
| Within the first week | Why it matters | Where to go |
|---|---|---|
| Fraud alert or security freeze | Stops new credit being opened in your name | Equifax, Experian and TransUnion, each separately |
| Identity theft report | Produces a recovery plan lenders accept | Federal Trade Commission, IdentityTheft.gov |
| Complaint against a financial company | Escalation when the firm will not act | Consumer Financial Protection Bureau |
| Direct deposit check | Prevents a benefit payment being diverted | Social Security Administration |
| Medicare account secured | The number is as sensitive as a card | Medicare, Part B premium $202.90/month in 2026 |
| Statement review | Catches small test charges before large ones | Every bank and card account, line by line |
How do you make the next one cheap?
Theft is not fully preventable. Its cost is. Four changes, made on a quiet afternoon, turn a week of phone calls into an hour.
Four settings and one sheet of paper
Turn off message previews on the lock screen, so verification codes are not readable on a locked phone. Move your two-factor codes from SMS to an authenticator app wherever the account allows it, because SMS follows the SIM. Set a SIM PIN with your carrier, and ask them to add a port-out passcode to your account. Then write one sheet of paper: your account list, your bank and carrier phone numbers, your device IMEI, and where the recovery codes live. Keep it where you keep your passport.
Rehearse it once
Pick a Sunday and pretend the phone is gone. Try to change your email password from the spare device. Try to reach your bank's fraud line without looking anything up on the phone. Whatever fails during the rehearsal is exactly what would have failed for real, and fixing it costs nothing on a Sunday. Fund the pieces you are missing at whatever pace suits you — I am Beezy covers small, specific purchases like a spare handset or a security key on a daily rhythm, and that spare is the difference between an inconvenience and a bad month.
