Lost or Stolen Phone With Crypto Apps? A First-Hour Checklist (2026)

By CoinX Editorial (GSPTeck) · Published 2026-11-02 · Last verified 2026-11-02

Lost your phone with crypto apps on it: what do you do first?

Lock the phone remotely, protect your phone number and email, then decide whether your wallet needs to move. In that order. A lost phone is rarely a direct path to your coins if it has a screen lock, but it can become one if the thief can read your SMS codes, open your email or find a seed phrase stored on the device. The first hour is about cutting those paths. After that, the question is simple: was your recovery phrase ever on that phone, or could anyone have seen it? If yes, treat the wallet as exposed and move the funds to a new one. This checklist covers both steps, plus what it means for reward and swap apps such as CoinDrop and Swappr, which only ever handle receiving addresses.

Educational content, not security advice for your specific setup. Menus differ by phone maker and Android version; follow your device's and wallet's own documentation.

The first hour: four things to do, in order

1. Lock or erase the phone remotely. Google's Android help explains that you can find, secure or erase a lost device from the Find Hub app on another Android device, or in a browser, after signing in with your Google Account. For that to work the phone must be powered on, online, signed in and have Find Hub turned on. Start with "secure device", which locks the screen and lets you show a message; keep "erase" for when you're sure it's gone, because Google notes that after an erase you need your Google Account password to use the phone again.
2. Call your mobile carrier. Ask them to suspend the SIM and put a block or PIN on number transfers. Whoever has your SIM can receive SMS codes, which is the main reason SMS is a weak second factor. Our guide to SIM swaps and safer 2FA explains why an authenticator app or security key is better.
3. Secure your email and Google Account. From another device, change the password and review recent activity and signed-in devices. Google's guide to securing a compromised account walks through it. Email matters because most exchange password resets go through it; check its forwarding rules too, because attackers like to add one that copies reset emails elsewhere.
4. Sign the phone out of every exchange. Log in from a trusted device, end all sessions, and check the withdrawal settings didn't change. The steps are in our logged-in devices and sessions audit.

Then decide: does your wallet need to move?

A self-custody wallet app on the phone is protected by the phone's lock and usually by the wallet's own password or PIN. Those protect the copy of the wallet stored on that device. They don't protect your recovery phrase if a copy of it lives somewhere the thief can reach. Our explainer on seed phrase vs private key vs wallet password covers why.

• Move the funds now if the phrase was ever in a screenshot, a notes app, a photo, an email draft, a chat or a cloud document on that phone, or if the phone was unlocked when it was taken. Restore the wallet from your offline backup on a trusted device, create a brand-new wallet with a new phrase, and send everything across. Don't reuse the old phrase.
• Moving is still sensible if the phone had no screen lock, a short PIN that someone could have watched you type, or a wallet without its own password.
• Less urgent if the phone was locked, the wallet had its own PIN, and the phrase only ever existed on paper or metal at home. Restore on your new phone from the paper backup and keep an eye on the old addresses.

Moving funds costs network fees on each chain, and tokens need the chain's gas coin to move. Move the largest balances first. If you can't find your backup at all and the phone is gone, there is no reset button in self-custody: that is the trade-off for nobody else holding your keys. When you withdraw to a replacement wallet, run the address-book poisoning checks before you confirm a large send.

What it means for CoinDrop and Swappr

Neither app is a wallet and neither ever asks for a recovery phrase, so a lost phone doesn't expose a phrase through them. Both apps declare on their Google Play Data safety sections that they collect no user data.

• CoinDrop: rewards you've already withdrawn are on-chain at the receiving address you entered, so they're as safe as that wallet. On your new phone, install CoinDrop from the official listing and check your status in the app. If something is missing, contact the developer through the email on the Google Play listing.
• Swappr: a swap that was already running isn't affected by the phone. The payout goes to the receiving address on the order, and your deposit transaction is public on the blockchain, so you can find it from a restored wallet. If you'd created an order but hadn't sent the deposit yet, do nothing: the order simply lapses.
• Reinstalling: check the developer is GSPTeck before you install either app again. Fake copies circulate; verifying an official crypto app on Google Play shows what to look for.

Before it happens: ten minutes of preparation

Most of the work above is much easier if a few settings are already in place.

• Turn on Theft protection. Google's Android help describes Theft Detection Lock, which can lock the screen if the phone is snatched and someone runs, bikes or drives away; Offline Device Lock, which locks the screen after the phone is kept offline; and Remote Lock, which locks the screen using just your verified phone number. You'll find them under Settings, Google, All services, Theft protection. Support depends on your Android version and device.
• Use a real screen lock. A PIN of six digits or more, or a password, and no pattern someone can read from smudges.
• Keep the recovery phrase off the phone. Paper or metal, stored offline. Nothing that syncs.
• Set a wallet PIN separate from the phone's, if your wallet offers one.
• Move exchange 2FA off SMS to an authenticator app with its own backup, or a security key.
• Write down your carrier's number and where your Google Account backup codes are kept.

Mistakes that make it worse

• Searching for "crypto recovery" help. People who've just lost a phone are a favourite target of fake recovery services. No one can reverse a blockchain transfer for a fee; see our piece on crypto recovery scams.
• Typing your phrase into a website to "check" the wallet. Restore only inside a wallet app you installed from the official store.
• Waiting for the phone to turn up before moving a wallet whose phrase was on it.
• Erasing before locking down accounts. Once erased, you can't see where the phone was. Lock first, secure accounts, then decide.

FAQ

Can someone take my crypto if they steal my phone?

Not easily if the phone is locked and your recovery phrase isn't stored on it. The real risks are an unlocked phone, a phrase saved in a screenshot or note, and SMS codes being used to reset exchange or email accounts.

Should I erase my phone remotely straight away?

Lock it first with Find Hub, then secure your carrier, email and exchange accounts. Erase once you're sure the phone won't be recovered. Google notes that an erased phone needs your Google Account password to be used again.

Do I lose my CoinDrop rewards if I lose my phone?

Rewards you've withdrawn are on-chain at your receiving address and stay there. Install CoinDrop again from the official Google Play listing and check in the app; contact the developer through the listing if anything looks wrong.

Is a swap in Swappr affected if my phone is stolen?

No. A running swap pays out to the receiving address on the order, whatever happens to the phone. An order you created but never funded simply lapses.

Sources

• Android Help: Find, secure, or erase a lost Android device (checked 2026-11-02)
• Android Help: Protect your personal data against theft (checked 2026-11-02)
• Google Account Help: Secure a hacked or compromised account (checked 2026-11-02)
• ethereum.org: Ethereum security and scam prevention (checked 2026-11-02)