PanicStation.org
UK USA
uk Technology & digital loss

What to do if…
your phone is remotely erased without your permission

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Use another trusted device to secure your main email account and the Apple or Google account linked to the phone before restoring or setting it up again. Check for unfamiliar devices and changed recovery details, then contact your mobile provider if your phone number or SIM may also be affected.

Do not do these things

  • Do not rush through the phone’s setup process before securing the accounts that control it.
  • Do not sign in through links in unexpected security emails or messages; use the provider’s official app or type its address into your browser.
  • Do not reuse the previous password or one used for another account.
  • Do not approve sign-in prompts or share verification codes that you did not request.
  • Do not issue another erase or reset command unless official support or your organisation’s IT team confirms that it is necessary.
  • Do not pay an unsolicited caller or message sender who promises to unlock the phone or recover all its data.

What to do now

  1. Use another phone, tablet or computer that you trust. If you think another person can access your usual devices or accounts, use a device they cannot access.

  2. Secure your main email account first. Check recent sign-ins, recovery details, forwarding rules and filters. Remove anything unfamiliar, change the password to a new and unique one, sign out other sessions where possible, and turn on two-step verification.

  3. Secure the account linked to the erased phone. For an iPhone, follow Apple’s compromised-account process. For an Android phone, follow Google’s compromised-account process. Review recent security activity, remove devices you do not recognise, correct changed recovery information and change the password.

  4. Contact your mobile provider if the SIM has stopped working, your number is behaving unexpectedly, or you see an unfamiliar SIM, eSIM, forwarding or account change. Ask the provider to check that you still control the number and to secure the mobile account.

  5. If the phone belongs to your employer or school, or was enrolled in its device-management system, contact its IT or security team. Ask whether an authorised management action caused the erase, and wait for its instructions before re-enrolling the phone.

  6. Change passwords on other important accounts that used the same password or depend on the affected email address or phone number. Start with banking, payment, shopping and password-manager accounts.

  7. Record when you noticed the erase. Save security alerts, account emails, unfamiliar device names, screenshots and mobile-provider reference numbers on the trusted device.

  8. Check bank, payment and shopping accounts for activity you do not recognise. Contact the organisation through its official app, website or published telephone number if you find an unauthorised payment or account change.

  9. If you find evidence of cyber crime, fraud or impersonation, report it to Report Fraud if you live in England, Wales or Northern Ireland. If you live in Scotland or the incident happened there, contact Police Scotland on 101. Call 999 only if someone is in immediate danger or an emergency response is needed.

  10. Restore or set up the phone only after the controlling accounts and phone number are secure and you have checked whether an authorised administrator caused the erase. Use the manufacturer’s official setup process and restore only a backup you recognise.

What can wait

You do not need to identify who caused the erase before securing your accounts. Buying a replacement phone, reinstalling every app, making an insurance claim, arranging paid data recovery and investigating the full technical cause can wait. Telling every contact can also wait unless you find messages or requests sent from your accounts without your permission.

Important reassurance

A remote erase does not necessarily remove information already stored in recognised cloud services or backups. Remote erasure can be triggered through a device account or an authorised management system, so the erase alone does not establish who caused it or how access was obtained.

Scope note

This guide covers immediate steps to protect your accounts, phone number and remaining data. Later recovery, employment, reporting or compensation decisions may require help from the device manufacturer, mobile provider, responsible organisation or a qualified specialist.

Important note

This is general information, not legal, financial, data-recovery or professional cyber-security advice. Follow the official instructions for your device, accounts and mobile provider.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us