PanicStation.org
UK USA
uk Money & financial emergencies

What to do if…
you lose access to your authenticator app and cannot log in to your financial accounts

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Treat this as both an access problem and a possible account-takeover risk. Use a trusted route to contact the bank or financial provider, ask them to secure the account first, then follow their identity checks to reset your login or two-factor authentication.

Do not do these things

  • Don’t approve any unexpected sign-in, add-device, payment, or verification prompt you did not start.
  • Don’t use phone numbers, links, QR codes, or chat contacts sent in a message to “fix” your access.
  • Don’t tell anyone a one-time code, recovery code, card PIN, banking password, or push-approval response.
  • Don’t keep trying the same login repeatedly if the provider is warning you about lockouts.
  • Don’t move money, add a payee, or change contact details while you are unsure the account is secure.
  • Don’t let a caller rush you into staying on the line while you “recover” the account.

What to do now

  1. Get out of any live pressure.
    If you are on a call, chat, or message thread about this, stop replying. Contact the provider yourself using 159 where supported, the number on your card or statement, or the provider’s official website typed in manually.

  2. Ask the provider to secure the account before resetting access.
    Say: “I’ve lost access to my authenticator app and cannot log in. Please secure the account first, check whether my phone number, email, payees, devices, or security settings have changed, then help me start the account recovery or two-factor reset process.”

  3. Separate a normal lockout from suspicious activity.
    A lost phone, phone upgrade, device wipe, authenticator reinstall, SIM change, or travel can explain a lockout. Unexpected approval prompts, new-device alerts, pressure to read out a code, or messages saying your money must be moved should be treated as suspicious.

  4. Protect the email and mobile number used for recovery.
    On a trusted device, check your email account for unfamiliar sign-ins, forwarding rules, filters, or recovery details you did not set. If your mobile signal has suddenly stopped or your number seems to have moved to another SIM, contact your mobile network and ask about unauthorised SIM or account changes.

  5. Check for activity without forcing online access.
    Use any safe channel you still have: card alerts, bank texts, emails, receipts, or the provider’s phone team. Ask the provider to check recent and pending transactions, new payees, changed contact details, added devices, and attempted logins.

  6. If anything is unauthorised, use the provider’s fraud process.
    Tell the provider clearly: “I do not recognise this activity and I want it treated as suspected fraud.” Ask what they are doing now to stop further access and what reference number or case number you should keep.

  7. If a bill is due today, buy time without making a rushed financial decision.
    Contact the biller, landlord, lender, or service provider directly and explain that you are temporarily locked out of online banking while your bank secures the account. Ask for a short extension or a safe alternative payment route.

  8. Report scam contact after the account is secured.
    In England, Wales, and Northern Ireland, report fraud or cyber crime to Report Fraud. In Scotland, report fraud to Police Scotland by calling 101 for non-emergencies. If someone is in immediate danger or a crime is happening now, call 999.

What can wait

  • Choosing a new authenticator app.
  • Changing every password across every account at once.
  • Closing accounts or switching banks.
  • Writing a detailed timeline; brief notes with dates, times, names, and reference numbers are enough for now.
  • Complaining to the Financial Ombudsman Service; that can wait unless the provider does not resolve the problem.

Important reassurance

Authenticator lockouts are common after phone loss, upgrades, repairs, and app reinstalls. Banks and financial providers may move slowly because they need to check identity and prevent account takeover; using trusted contact routes is the safest way back in.

Scope note

These are first steps to stabilise access, reduce fraud risk, and buy time. Later decisions about complaints, reimbursement, investment accounts, credit files, or wider security may need specialist help from the provider or an appropriate adviser.

Important note

This is general information, not legal, financial, cyber security, or professional advice. If you suspect fraud or unauthorised transactions, prioritise contacting the provider through a trusted route and following their fraud process.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us