PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your phone is remotely erased without your permission

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Use another device you trust to secure the email, Apple Account, or Google Account connected to the phone. Pause the phone’s setup process until you control those accounts and have checked whether your cellular service was changed.

Do not do these things

  • Do not enter passwords or verification codes through links in unexpected erase alerts, emails, or text messages.
  • Do not share passwords, recovery keys, device passcodes, or verification codes with anyone offering support.
  • Do not rush through the phone’s setup screens before securing the accounts that control it.
  • Do not delete security alerts, account emails, photographs, or screenshots yet.
  • Do not pay someone claiming they can trace the person responsible or guarantee data recovery.
  • Do not assume the erase proves who caused it.
  • Do not confront someone you suspect if doing so could put you at risk.

What to do now

  1. Use a computer, tablet, or other phone you trust. Avoid a shared device if someone else may know your passwords or have access to your accounts.

  2. Take one minute to record what happened. Photograph the phone’s setup or reset screen, save any erase notification, note the approximate time, and keep related emails or text messages.

  3. Secure the email account that receives your password-reset messages. Change its password to a new, unique password, sign out sessions or devices you do not recognize, check its recovery details, and remove any forwarding rules you did not create.

  4. Secure the account linked to the erased phone. For an iPhone, use Apple’s compromised-account process. For an Android phone, use Google’s compromised-account process. Review recent activity and connected devices, remove access you do not recognize, correct recovery information, and use the official account-recovery route if you cannot sign in.

  5. Check your cellular service. If calls, texts, or mobile data stopped unexpectedly, contact your carrier through its official website, app, a recent bill, or a known customer-service number. Ask whether the SIM, eSIM, phone number, account password, PIN, or authorized-user list changed, and secure the carrier account.

  6. Contact your employer or school through a known channel if the phone is organization-owned or has a work or school management profile. An administrator may be able to erase a managed device or its work data, so ask whether a management command was sent.

  7. Check banking, payment, cloud-storage, password-manager, and other sensitive accounts that were accessible from the phone. Report unfamiliar transactions or account changes directly to the relevant company using a verified contact route.

  8. After the controlling accounts and phone number are secure, continue the phone’s official setup process. Check for an iCloud, Google, computer, manufacturer, or app-specific backup before assuming the erased data is permanently unavailable.

  9. Use IdentityTheft.gov if you find unauthorized financial activity, new accounts, changed personal information, or other signs that someone is using your identity.

What can wait

You do not need to identify who caused the erase, change every low-priority password, buy a replacement phone, choose a data-recovery service, or decide whether to make a formal report before securing your main email, cellular account, and Apple or Google account. Restoring less important apps and settings can also wait.

Important reassurance

An erased phone does not necessarily mean every copy of your information is gone. Information that was already synchronized, backed up, or stored by an app provider may still be available after your accounts are secure.

Scope note

This guide covers immediate account security, checking for further unauthorized activity, and finding existing backups. Ongoing compromise, identity theft, workplace-device disputes, personal-safety concerns, or specialist data recovery may require additional support.

Important note

This is general information, not legal, financial, cybersecurity, forensic, or professional data-recovery advice. Follow instructions from your account provider, carrier, employer, financial institution, or a qualified specialist for your circumstances. If the erasure is connected to stalking, abuse, or an immediate threat, use a safer device to contact 911 or a trusted person.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us