Stolen phone: what to do in the first hour (SIM, Pix, accounts)

The phone vanishes from your hand at a traffic light, on the bus or in a bar. You can buy a new handset. What hurts is what was inside: the banking app, WhatsApp, email, password manager and the SIM card that receives every verification code. Thieves know this, and the window between the theft and the first unauthorized Pix transfer (Brazil's instant payment system) can be a matter of minutes. This guide is a first-hour playbook, in the order that matters.

What to do first: the right order

The logic is simple: lock down money and accounts before trying to recover the device. Tracking the phone comes second, because the big losses come from account access.

1. Block the line and bank accounts through Celular Seguro (details in the next section), from another phone, a computer, or by asking a trusted person.
2. Call your carrier and block the SIM if you haven't done it through the app. With no active SIM, the thief can't receive recovery SMS messages.
3. Tell your bank using the official phone number (the one on the back of your card or on the website) and ask to block app access and review your Pix limits.
4. Change your Google or Apple account password and sign out of open sessions. That account is the key to almost everything on the device.
5. Change your main email password and those of the most sensitive apps (bank, brokerage, password manager), in that order.
6. File a police report. You need it to dispute transactions and, in many cases, for insurance.

What Celular Seguro is and how it helps

How does Brazil's Celular Seguro work?

It is a platform run by Brazil's Ministry of Justice and Public Security, accessed with a gov.br login, where you register your device and, after a theft, request blocking of the line, the IMEI and access to accounts at partner institutions. It does not replace the police report.

According to the ministry's official information, there are two blocking modes:

• Total Block (Bloqueio Total): disables the line, the accounts linked to partner institutions and the device's IMEI. The phone becomes unusable for whoever took it, but also harder for the police to recover.
• Recovery Mode (Modo Recuperação): blocks the line and the accounts but keeps the IMEI active, which makes it easier for law enforcement to locate and recover the device.

As the Ministry of Justice's explanation of the two modes shows, the choice depends on your priority: make the device useless or try to get it back. If the phone held little sensitive data and you want it back, Recovery Mode makes sense. If the risk is high, Total Block is the conservative option.

What is the "trusted person" in Celular Seguro?

It is someone you register in the app who can issue the block alert on your behalf if you have no phone and no access to anything. That person also needs the app and a gov.br login, which prevents unwanted blocks by third parties, according to Agência Gov.

In practice, it solves the worst case: you were just robbed, you have no phone and you can't remember your gov.br password. A trusted person can trigger the block for you.

What to do BEFORE it gets stolen

Celular Seguro only really helps if the device is already registered. Set aside 10 minutes today:

• Register the phone in the app under "Registrar Telefone", with make, model, carrier, number and IMEI. To see the IMEI, dial *#06#. Also write the number down somewhere other than the phone.
• Register a trusted person who answers quickly and has the app installed.
• Turn on device location: "Find My Device" on Android, "Find My" on iPhone. Without it you can't lock or wipe the phone remotely.
• Use a strong screen lock, with a long password or PIN, and hide sensitive notifications on the lock screen. An easy-to-spy swipe pattern protects nothing. Settings are covered in how to protect your Android with security settings.
• Use an authenticator app, not SMS, on important accounts. If the SIM falls into the wrong hands, SMS becomes an open door, the mechanism explained in SIM swap. The step-by-step is in how to set up 2FA with TOTP.
• Set a nighttime Pix limit in your banking app. Many banks let you lower the amount between 8 pm and 6 am, when a robbery hurts most.
• Keep passwords in a manager with a strong master password, as the Bitwarden guide shows, not in notes or screenshots in your gallery.

And WhatsApp? Will they use my number?

This is the second risk after the bank. With the SIM blocked, the attacker loses the main route to register your WhatsApp on another device. Ask your carrier for a new SIM with the same number as soon as possible and reinstall the app to recover your account. If it was already cloned or scammers are asking your contacts for money, follow the cloned WhatsApp playbook and warn your contact list through another channel.

Common mistakes in the panic

• Trying to track before blocking. Accounts first, search later. Going after the thief is risky and ineffective.
• Clicking a "your phone was found" link. Scammers send fake SMS and emails with a link to a "map" asking for your Google or Apple login. That is phishing, the same pattern as in how to spot phishing.
• Waiting to change passwords. If the device was unlocked or the lock screen was easy to bypass, every hour counts.
• Skipping the police report. Without it, disputing a transfer with the bank is much harder.

The bigger lesson

Phone theft is largely a problem of risk concentration: one pocket-sized device holds your bank, email, verification codes and identity. Security here means reducing what a single stolen object can open. Prior registration, a trusted person, an authenticator app and a Pix limit take a few minutes and completely change the outcome of the worst day. To go further, read the definitive privacy and OPSEC guide and then check whether your email shows up in breaches with Have I Been Pwned.

Sources consulted

• Ministry of Justice and Public Security — Total Block and Recovery Mode
• Agência Gov — Trusted Person feature
• Idec — Celular Seguro: how it works