PanicStation.org
UK USA
us Money & financial emergencies

What to do if…
you lose access to your authenticator app and cannot log in to your financial accounts

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Treat this as both an access problem and a possible fraud risk. Contact your bank, card issuer, brokerage, or payment provider using an official route, ask them to secure the account first, then follow their identity-check process to reset two-factor authentication.

Do not do these things

  • Don’t approve unexpected sign-in, add-device, or verification prompts you did not start.
  • Don’t use phone numbers, links, or QR codes sent by text, email, social media, or pop-up messages to restore access.
  • Don’t share one-time codes, backup codes, passwords, or push approvals with anyone who contacts you.
  • Don’t keep retrying logins if the provider warns that more attempts may extend the lockout.
  • Don’t make rushed transfers, withdrawals, loans, crypto purchases, or account changes while you are unsure the account is secure.
  • Don’t delete security emails, texts, or app alerts yet; they may help you explain the timeline to the provider.

What to do now

  1. Stop any live scam contact and switch to an official route.
    If someone contacted you about the account, end the call, chat, or message thread. Contact the financial provider using the number on your card or statement, or by typing the provider’s known website address yourself.

  2. Ask the provider to secure the account before resetting access.
    Say: “I lost access to my authenticator app and cannot complete two-factor authentication.” Ask them to:

    • check whether your phone number, email, mailing address, trusted devices, or security settings were changed,
    • add extra verification or a note about possible account takeover,
    • ask whether they can temporarily block new payees, transfers, withdrawals, card changes, or device additions while recovery is underway,
    • start their official two-factor reset or account recovery process.

  3. Secure the email account that controls password resets.
    From a device you trust, check your email account’s recent sign-ins, recovery email, recovery phone, forwarding rules, filters, and security alerts. Change the email password if anything looks wrong, and do not reuse a password from another account.

  4. Check whether your mobile number is still under your control.
    If calls or texts stopped working, or your carrier account shows changes you did not make, contact your mobile carrier through an official route. Ask about unauthorized SIM changes, port-out activity, and account protections such as a port lock or account PIN.

  5. Check for unauthorized account activity using any channel still available.
    If you cannot log in online, use card alerts, bank emails, paper statements, ATM access, or a phone call to the provider. Ask the provider to review recent and pending transactions, new payees, new cards, address changes, password resets, and device additions. If anything is unauthorized, ask to open a fraud claim and get the case number.

  6. If identity theft or new-account fraud might be involved, add a credit barrier.
    A fraud alert can generally be placed by contacting one of the three nationwide credit bureaus, which must tell the other two. A credit freeze helps block new credit accounts and generally needs to be placed separately with Equifax, Experian, and TransUnion. This is most relevant if you suspect phishing, SIM swap, stolen personal information, or attempts to open credit in your name.

  7. If a bill or payment is due today, buy time without using a risky workaround.
    Contact the biller, landlord, lender, utility, or provider directly. Say you have a temporary loss of banking access and ask for a short extension, alternate payment route, or fee waiver. Avoid taking out expensive credit or sending money through an unfamiliar method just to solve the lockout quickly.

  8. If the provider does not resolve the problem, escalate through official complaint channels.
    Keep brief notes: date, time, phone number used, representative name if given, case number, and what was promised. Start with the provider’s own complaint process. If that does not help, use an official regulator or complaint channel that fits the type of financial institution or account.

What can wait

  • Choosing the best long-term authenticator setup.
  • Moving every account to a new bank, brokerage, or payment app.
  • Reorganizing all passwords and security settings across every account.
  • Deciding exactly how the lockout happened.
  • Making major financial decisions that can wait until access and security are stable.

Important reassurance

This can happen after a phone is lost, replaced, reset, repaired, or restored from backup. Recovery may feel slow because financial providers are trying to confirm that the person asking for access is really you. Staying on official contact routes reduces the risk of making the problem worse.

Scope note

These are first steps only. Each bank, card issuer, brokerage, credit union, payment app, and mobile carrier has its own account recovery and fraud process, and later decisions may need specialist help.

Important note

This is general information, not legal, financial, cybersecurity, or professional advice. If money is missing, fraud is active, or you cannot regain access, prioritize your provider’s official fraud and complaint process.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us