I. Introduction

A stolen mobile phone is not merely a lost piece of property. In the Philippines, a mobile phone often contains access to banking applications, e-wallets, government accounts, social media profiles, private messages, personal photos, work documents, and one-time passwords. The loss of a phone may therefore expose the owner not only to property loss, but also to identity theft, unauthorized financial transactions, cybercrime, privacy violations, and fraud.

Blocking a stolen mobile phone in the Philippines usually involves several parallel actions: securing the SIM card, blocking or disabling the device, reporting the incident to law enforcement, protecting digital accounts, and preserving evidence for insurance, warranty, banking, or criminal investigation purposes.

This article discusses the legal and practical framework for blocking a stolen mobile phone in the Philippine context.

II. Meaning of “Blocking” a Stolen Mobile Phone

In ordinary usage, “blocking” a stolen phone may refer to several different actions:

Blocking the SIM card so that the thief cannot use the mobile number for calls, texts, mobile data, OTPs, or account recovery.
Suspending or replacing the mobile number through the telecommunications provider.
Blocking the device itself through its IMEI number so that it cannot be used on mobile networks.
Remotely locking or erasing the phone through Apple, Google, Samsung, or other device-management services.
Disabling access to apps and accounts linked to the stolen phone, including banking, e-wallets, email, and social media.

These remedies are related, but they are not the same. A SIM block affects the mobile number. An IMEI block affects the handset. A remote lock or wipe affects the device’s data. Account security measures protect the owner’s digital identity and finances.

III. Legal Nature of Mobile Phone Theft

A mobile phone is personal property. If it is taken without the owner’s consent and with intent to gain, the act may constitute theft under the Revised Penal Code.

Theft may also be accompanied by other offenses depending on the facts. For example:

If the phone was taken by force, intimidation, or violence, the offense may involve robbery rather than simple theft.
If the phone was taken by snatching, pickpocketing, or stealth, it may still be prosecuted as theft or robbery depending on the circumstances.
If the thief uses the phone to access bank accounts, e-wallets, emails, or social media, additional offenses may arise under cybercrime, identity theft, access-device, data privacy, or fraud-related laws.
If the stolen SIM or phone is used for scams, unauthorized transactions, phishing, or impersonation, the owner should immediately create a paper trail showing that the device and number were stolen.

The legal importance of promptly reporting and blocking the phone is that it helps prevent further harm and protects the owner from being wrongfully associated with later misuse of the device or number.

IV. Immediate Steps After Discovering the Theft

The first hours after the theft are critical. The owner should act quickly and in an organized manner.

A. Call the Mobile Network Provider

The first legal and practical step is usually to contact the telecommunications provider and request suspension or blocking of the SIM card.

For Philippine users, the relevant providers commonly include Globe, Smart, TNT, DITO, and other authorized mobile service providers.

The subscriber should be prepared to provide:

Full name of the registered subscriber
Mobile number
Valid government-issued ID
SIM registration details, if available
Approximate date, time, and place of theft
Proof of ownership or use
Police report or affidavit of loss, if required
IMEI number, if requesting device blocking

The subscriber should ask for a reference number, case number, ticket number, or written confirmation of the report.

B. Request SIM Suspension or SIM Replacement

The immediate priority is to stop the thief from using the number. This is especially important because mobile numbers are often used to receive OTPs and account recovery codes.

The user should request:

Temporary suspension of the SIM
Blocking of outgoing and incoming services
Replacement SIM with the same number, if available
Confirmation that the stolen SIM can no longer receive OTPs, calls, or text messages

A replacement SIM may require personal appearance at a service center, presentation of valid identification, and compliance with SIM registration requirements.

C. Remotely Lock or Erase the Device

The phone owner should use the relevant device-tracking or security platform:

For Android: Find My Device
For iPhone: Find My iPhone / Find My
For Samsung: Samsung Find / Samsung account tools, if enabled

Available options may include:

Locating the phone
Playing a sound
Locking the phone
Displaying a message on the lock screen
Signing out of the device
Erasing the phone

Remote erase is usually advisable if the phone contains sensitive data and recovery appears unlikely. However, once erased, tracking functions may become limited depending on the device, platform, and settings.

D. Change Passwords Immediately

The user should change passwords for accounts accessible through the phone, especially:

Email accounts
Online banking
E-wallets
Social media
Messaging apps
Cloud storage
Government accounts
Work accounts
Shopping platforms
Delivery apps
Ride-hailing apps
Password managers

Priority should be given to the primary email account because it is often used to reset other passwords.

E. Contact Banks and E-Wallet Providers

If the phone has banking apps, credit card apps, debit card apps, e-wallets, or saved payment methods, the user should immediately notify the financial institutions concerned.

The user should request:

Temporary account hold, if necessary
Deactivation of mobile app access
Blocking of cards, if compromised
Monitoring for suspicious transactions
Dispute or reversal procedures for unauthorized transactions
Written reference numbers for reports

In the Philippines, this commonly includes banks, credit card issuers, GCash, Maya, ShopeePay, GrabPay, Lazada Wallet, and other financial or payment platforms.

F. File a Police Report

The owner should file a report with the nearest police station, usually the station with jurisdiction over the place where the theft occurred.

A police report is important because it may be required by:

Telecommunications providers
Banks
E-wallet providers
Insurance companies
Employers
Government agencies
Courts or prosecutors
Device manufacturers or service centers

The report should include:

Date, time, and place of incident
Description of how the phone was stolen
Brand, model, color, and storage capacity of the phone
IMEI number
Mobile number
SIM card details
Approximate value of the device
Accessories included
Suspect details, if known
Witnesses, CCTV locations, or other evidence
Immediate actions already taken

V. The IMEI Number and Its Legal Importance

A. What Is an IMEI Number?

The International Mobile Equipment Identity, or IMEI, is a unique number assigned to a mobile device. It identifies the handset itself, not the SIM card.

A dual-SIM phone may have two IMEI numbers.

The IMEI may be found:

On the original box
On the purchase receipt or invoice
In the phone settings, if still accessible
By dialing *#06#, if the phone is in hand
In the user’s Google, Apple, or Samsung account device records
In carrier records, depending on availability
On warranty documents

B. Why the IMEI Matters

A SIM card can be removed and replaced. A thief may insert another SIM into the stolen phone. Blocking only the SIM may therefore protect the number, but not necessarily prevent use of the device.

IMEI blocking aims to prevent the handset from connecting to mobile networks. In theory, once blacklisted, the phone becomes far less useful for ordinary mobile communication.

C. Limitations of IMEI Blocking

IMEI blocking has limits:

It may not stop Wi-Fi use.
It may not erase the phone’s data.
It may not prevent resale for parts.
It may not work if the device is used outside covered networks.
Criminals may attempt illegal tampering with IMEI numbers.
Implementation may depend on telecom systems, inter-network coordination, and regulatory processes.

For these reasons, IMEI blocking should be combined with SIM blocking, remote locking, password changes, and police reporting.

VI. Role of Telecommunications Providers

Telecommunications providers are the first institutional point of contact for SIM-related remedies.

The subscriber should ask the provider to:

Suspend the stolen SIM.
Issue a replacement SIM under the same number.
Prevent the stolen SIM from receiving OTPs.
Assist with IMEI blocking or blacklisting, if available.
Provide written confirmation or a ticket number.
Record the report of theft in the subscriber’s account.
Advise on documentary requirements.

The provider may require proof that the person requesting blocking is the rightful subscriber. This is especially important after the implementation of SIM registration requirements, because the registered identity attached to the SIM will be relevant in verifying ownership.

VII. SIM Registration and Stolen Phones

The SIM Registration framework in the Philippines makes the identity of the registered SIM owner more important. A stolen SIM may expose the registered user to risk if the number is later used for scams, threats, fraud, or unlawful activity.

A subscriber whose registered SIM was stolen should act quickly to create a clear record that the number was no longer under their control after the theft.

Important steps include:

Reporting the stolen SIM to the telco
Requesting suspension or deactivation of the stolen SIM
Obtaining a replacement SIM
Filing a police report
Keeping reference numbers and written confirmations
Informing banks, e-wallets, and other linked services

A registered subscriber should not ignore the theft simply because the phone is protected by a passcode. The SIM itself may still be used if it is not protected by a SIM PIN or if it is transferred to another phone.

VIII. Importance of SIM PIN Protection

A SIM PIN is a separate security feature from the phone’s screen lock. It prevents the SIM card from being used in another device unless the correct PIN is entered.

Many users overlook this feature. Without a SIM PIN, a thief may remove the SIM card, place it in another phone, and attempt to receive OTPs or account recovery messages.

A SIM PIN should ideally be enabled before any theft occurs. After a phone is stolen, the owner should not rely on it as the only protection, but it may reduce the risk of immediate misuse.

IX. Reporting to the Police

A. Where to Report

The owner may report the incident to the nearest police station, ideally the station covering the place where the theft happened.

If the theft occurred in a mall, terminal, office, school, condominium, restaurant, or public transport area, the owner may also request security assistance and CCTV preservation.

B. What to Bring

The complainant should bring:

Valid government-issued ID
Proof of ownership, such as receipt, invoice, box, warranty card, or screenshots of device account records
IMEI number
Mobile number
Telco reference number, if already reported
Screenshots of location tracking, if any
Details of suspicious transactions, if any
Names of witnesses, if any

C. Why a Police Report Matters

A police report helps establish:

That the device was stolen
When and where it was lost
That the owner reported promptly
That later misuse was unauthorized
That the owner had no control over the device after the theft

This can be important in disputes with banks, e-wallets, employers, telecom providers, insurance companies, and law enforcement agencies.

X. Affidavit of Loss vs. Police Report

An Affidavit of Loss and a Police Report are different documents.

An Affidavit of Loss is a sworn written statement, usually notarized, explaining the circumstances of the loss. It is often used for replacement of documents, SIM cards, IDs, and similar items.

A Police Report is an official law enforcement record of the incident.

For stolen phones, a police report is often better because theft is a crime. Some institutions may require one or both.

An affidavit may include:

Identity of the owner
Description of the phone
IMEI number
Mobile number
Circumstances of the theft or loss
Statement that the device and SIM are no longer in the owner’s possession
Statement that any unauthorized use after the incident is not attributable to the owner
Request for replacement, blocking, or other appropriate action

XI. Blocking Through Apple, Google, or Device Accounts

A. iPhone

For iPhones, the owner should use Apple’s Find My service, if enabled. Activation Lock may prevent others from easily using the device without the owner’s Apple ID.

Recommended actions include:

Mark the device as lost
Lock the device
Display a contact message, if appropriate
Erase the device if sensitive information is at risk
Do not remove the device from the Apple ID account unless necessary, because removal may disable Activation Lock

The owner should also change the Apple ID password and review trusted devices.

B. Android

For Android phones, the owner should use Google’s Find My Device, if enabled.

Recommended actions include:

Secure the device
Sign out of Google services on the phone
Erase the device if recovery is unlikely
Change the Google account password
Review active sessions and remove unfamiliar devices

C. Samsung and Other Manufacturer Tools

Samsung and some other manufacturers have their own device-management systems. These may allow location, locking, backup, and erasure if the relevant settings were activated before the theft.

XII. Cybersecurity Measures After Phone Theft

Blocking the physical device is not enough. A stolen phone can become a gateway to digital identity theft.

The owner should perform a digital security audit.

A. Email

Change the password of the primary email account. Review:

Recovery email
Recovery phone number
Logged-in devices
Forwarding rules
Filters
App passwords
Recent security activity

B. Social Media and Messaging Apps

Secure accounts such as Facebook, Instagram, TikTok, X, Viber, Telegram, WhatsApp, Messenger, and similar platforms.

Actions include:

Logging out from all devices
Changing passwords
Enabling two-factor authentication
Removing the stolen device from trusted devices
Warning contacts if impersonation is possible

C. Financial Apps

Immediately review transactions and notify providers. Keep screenshots and reference numbers.

For unauthorized transactions, prompt reporting is critical because financial institutions often have specific timeframes and procedures for disputes.

D. Work Accounts

If the phone contained work email, company apps, confidential files, or authenticator apps, the user should notify the employer or IT administrator immediately.

The employer may remotely wipe work profiles, revoke tokens, reset passwords, or suspend access.

XIII. Legal Issues Involving OTPs and Account Takeover

One of the greatest risks of a stolen phone is OTP interception. If a thief can access the SIM, SMS inbox, notification previews, or email, they may attempt account takeover.

Possible consequences include:

Unauthorized bank transfers
E-wallet withdrawals
Loan applications
Online purchases
SIM swap attempts
Social media impersonation
Blackmail or extortion
Access to private photos or messages
Use of the number for scams

The owner should document all reports to show that any such actions were unauthorized.

XIV. Stolen Phone Used for a Crime

If the stolen phone or SIM is used for illegal activity after the theft, the owner may need to prove that they had already lost possession and control of the device.

Evidence may include:

Police report
Telco suspension request
SIM replacement record
IMEI blocking request
Bank or e-wallet reports
Emails confirming password changes
Screenshots of remote lock or erase
Witness statements
CCTV request logs
Incident reports from establishments

Prompt reporting is the owner’s best protection.

XV. Data Privacy Considerations

A stolen phone may contain personal information of the owner and of third parties. This may include contacts, private conversations, photos, financial records, medical information, business documents, and government IDs.

If the phone contains personal data used for business, professional, or employment purposes, there may be additional obligations under Philippine data privacy principles.

For example, if the phone belongs to a business, clinic, school, employer, lawyer, accountant, real estate broker, or other professional handling personal data, the theft may need to be assessed as a possible security incident or personal data breach.

Relevant considerations include:

What personal data was stored on the phone
Whether the phone was encrypted
Whether it had a strong passcode or biometrics
Whether remote wipe was successful
Whether business accounts were logged in
Whether third-party personal data may be exposed
Whether notification or breach management procedures are required

XVI. Blocking a Phone Bought Secondhand

A special issue arises when a person buys a secondhand phone that later turns out to be stolen or blocked.

A buyer of a secondhand phone should be cautious and should ask for:

Original receipt or proof of purchase
Seller’s valid ID
Written deed of sale or acknowledgment receipt
IMEI number
Verification that the device is not locked, blacklisted, or linked to another account
Confirmation that Apple ID, Google account, Samsung account, or similar lock has been removed

Buying a stolen phone may expose the buyer to legal problems. Even if the buyer did not steal the phone, possession of recently stolen property may create suspicion and may require explanation.

If the phone is discovered to be stolen, the buyer should cooperate with authorities and preserve communications with the seller.

XVII. What Not to Do After a Phone Is Stolen

The owner should avoid the following:

Do not personally confront a suspect in a dangerous situation.
Do not attempt vigilante recovery.
Do not pay ransom without assessing the risk.
Do not click suspicious “your phone has been found” links.
Do not remove an iPhone from the Apple ID account unless the consequences are understood.
Do not delay reporting to the telco.
Do not rely only on a screen lock.
Do not assume that remote tracking guarantees safe recovery.
Do not post sensitive tracking screenshots publicly.
Do not ignore small unauthorized transactions, as they may indicate larger compromise.

XVIII. Common Scam After Phone Theft

A common post-theft scam involves messages claiming that the stolen phone has been found and asking the owner to log in to a fake Apple, Google, or tracking page. The purpose is to steal the owner’s account credentials and disable anti-theft protections.

Warning signs include:

Suspicious links
Urgent language
Requests for Apple ID, Google password, OTP, or recovery codes
Poor grammar or unofficial domains
Messages sent through unknown numbers
Claims that the device will be permanently locked unless the user logs in

The owner should access Apple, Google, Samsung, or telco services only through official apps or official websites, not through links sent by strangers.

XIX. Use of CCTV and Establishment Incident Reports

If the phone was stolen in a mall, restaurant, transport terminal, school, office, condominium, hotel, or store, the owner should promptly request that CCTV footage be preserved.

Many establishments overwrite CCTV footage after a short retention period. The owner should:

Report to security immediately
Ask for an incident report
Record the names of security personnel who assisted
Identify camera locations
Note the exact time and place
Coordinate with police for formal CCTV requests

Private establishments may not release CCTV footage directly to individuals, but they may preserve it or provide it to law enforcement.

XX. Blocking and Replacing Authenticator Apps

Many users rely on authenticator apps for two-factor authentication. If the stolen phone contained an authenticator app, the user should immediately review accounts that use it.

Possible actions include:

Use backup codes
Transfer authenticator access to a new device
Revoke the stolen device
Reset two-factor authentication
Contact account support
Regenerate recovery codes
Remove unknown sessions

This is especially important for work accounts, crypto accounts, banking platforms, and primary email accounts.

XXI. Employer-Issued Phones

If the stolen phone is company-owned or used for work, the employee should notify the employer immediately.

The employer may need to:

Remotely wipe the device
Disable company email
Revoke access tokens
Suspend work apps
Notify IT security
Assess data breach risk
File an insurance claim
Record the incident for compliance purposes

The employee should not delay notification out of embarrassment. Delay may worsen both legal and cybersecurity exposure.

XXII. Phones Containing Government IDs and Sensitive Documents

Many phones contain photos or scans of passports, driver’s licenses, national IDs, company IDs, vaccination records, school IDs, tax documents, and bank documents.

After theft, the owner should assume that such documents may be at risk if the phone was not securely locked or encrypted.

Recommended actions include:

Monitor for suspicious account openings
Be alert for loan or credit scams
Change passwords for accounts where IDs were uploaded
Notify banks or financial platforms if identity documents were stored in the phone
Keep the police report for future identity-theft disputes

XXIII. Insurance Claims

If the phone is covered by insurance, device protection, credit card purchase protection, or employer property insurance, the owner should check the claim requirements.

Common requirements include:

Police report
Affidavit of loss
Proof of purchase
IMEI number
Telco report
Proof of blocking or suspension
Valid ID
Claim form
Photos of the box or receipt, if available

Insurance policies may have strict reporting deadlines. Delayed reporting may affect recovery.

XXIV. Evidence Checklist

The owner should preserve the following:

Purchase receipt or invoice
Phone box showing IMEI
Screenshots from Apple, Google, or Samsung device pages
Telco reference number
Police report
Affidavit of loss
Bank and e-wallet report numbers
Unauthorized transaction screenshots
Emails confirming password changes
Messages from suspected scammers
CCTV request records
Witness names and contact details

Do not delete suspicious messages, phishing attempts, or unauthorized transaction notifications. These may be useful evidence.

XXV. Sample Timeline of Action

A practical response may look like this:

Within the First 15 Minutes

Try to locate the phone using Find My iPhone, Find My Device, or equivalent.
Lock the phone remotely.
Call the mobile provider to suspend the SIM.
Change the primary email password.
Freeze or secure banking and e-wallet access.

Within the First Hour

Change passwords for financial, social media, and cloud accounts.
Log out of all sessions where possible.
Notify banks and e-wallet providers.
Ask the telco about SIM replacement and IMEI blocking.
Save reference numbers.

Within the Same Day

File a police report.
Prepare an affidavit of loss if needed.
Request CCTV preservation if relevant.
Visit a telco store for SIM replacement.
Review financial accounts for suspicious activity.

Within the Next Few Days

Follow up on IMEI blocking.
Replace or reconfigure authenticator apps.
Review cloud backups.
Monitor accounts.
Submit insurance or employer reports, if applicable.

XXVI. Sample Affidavit of Loss for a Stolen Mobile Phone

Below is a general sample. It should be adapted to the facts and notarized if required.

AFFIDAVIT OF LOSS

I, ______________________, of legal age, Filipino, and residing at ______________________, after having been duly sworn in accordance with law, state:

That I am the lawful owner/user of a mobile phone described as follows:
- Brand/Model: ______________________
- Color: ______________________
- Storage/Variant: ______________________
- IMEI No.: ______________________
- Mobile Number/SIM: ______________________
That on or about ______________________, at approximately ______________________, while I was at ______________________, the said mobile phone was stolen/lost under the following circumstances: ______________________.
That despite diligent efforts to locate or recover the said mobile phone, the same could no longer be found.
That I have reported or will report the matter to the appropriate authorities and/or telecommunications provider for purposes of blocking, suspension, replacement, or other appropriate action.
That I am executing this affidavit to attest to the truth of the foregoing facts and for whatever lawful purpose it may serve, including the blocking of the device and/or SIM, replacement of the SIM, reporting to financial institutions, and other related purposes.

IN WITNESS WHEREOF, I have signed this affidavit this ___ day of __________ 20___ at ______________________.

Affiant

SUBSCRIBED AND SWORN to before me this ___ day of __________ 20___, affiant exhibiting competent proof of identity: ______________________.

Notary Public

XXVII. Sample Police Report Details

When reporting to the police, the complainant should be ready with a concise narration:

On [date] at around [time], while I was at [location], my mobile phone was stolen. The device is a [brand/model/color], with IMEI number [IMEI], using mobile number [number]. The phone contains personal accounts, banking/e-wallet applications, and private information. I have already requested SIM suspension from [telco] under reference number [number]. I respectfully request that this incident be recorded for investigation and for purposes of blocking, account protection, and prevention of unauthorized use.

XXVIII. Frequently Asked Questions

1. Can a stolen phone be blocked in the Philippines?

Yes, but the process may involve more than one step. The SIM may be suspended by the telco. The device may be reported for IMEI blocking or blacklisting, subject to the telco’s procedures and requirements. The owner should also remotely lock or erase the device through Apple, Google, Samsung, or similar services.

2. Is blocking the SIM enough?

No. Blocking the SIM protects the mobile number, but the thief may still use the phone with another SIM or over Wi-Fi. The owner should also try to lock or erase the device and request IMEI blocking where available.

3. Is blocking the IMEI enough?

No. IMEI blocking may prevent ordinary mobile network use, but it does not necessarily erase data, stop Wi-Fi access, or prevent illegal resale for parts. It should be combined with remote lock, remote erase, password changes, and financial account protection.

4. Do I need a police report?

A police report is strongly advisable. It may be needed by telcos, banks, e-wallets, insurance providers, employers, and investigators. It also helps prove that any later use of the phone or SIM was unauthorized.

5. What if I do not know my IMEI?

Check the phone box, receipt, warranty card, device account records, Apple ID, Google account, Samsung account, or telco records. For future protection, users should record their IMEI numbers before any incident occurs.

6. Can the thief access my bank accounts?

Possibly, depending on the phone’s security, SIM access, saved passwords, notification previews, biometrics, app protections, and OTP access. The owner should immediately notify banks and e-wallet providers.

7. Should I track and recover the phone myself?

The owner should be cautious. Tracking information may help police, but personal confrontation can be dangerous. Recovery should be coordinated with law enforcement or security personnel.

8. What happens to my mobile number?

The telco may suspend the stolen SIM and issue a replacement SIM with the same number, subject to verification and requirements.

9. Can I still receive OTPs after SIM replacement?

Once the replacement SIM is activated and the stolen SIM is disabled, OTPs should go to the replacement SIM. The user should confirm this with the telco and test important accounts carefully.

10. What if the stolen phone is later found?

The owner should inform the telco, police, insurer, employer, or other institutions previously notified. If the IMEI was blocked, the owner may need to ask about unblocking procedures, subject to proof of ownership and applicable rules.

XXIX. Preventive Measures Before Theft Happens

The best time to prepare for phone theft is before it happens.

Users should:

Record the IMEI number.
Keep the purchase receipt and box.
Enable Find My iPhone, Find My Device, or equivalent.
Use a strong passcode, not merely a simple pattern.
Enable device encryption.
Enable SIM PIN.
Turn off sensitive lock-screen previews.
Use app-specific PINs for banking and e-wallet apps.
Avoid storing passwords in plain notes.
Use a password manager with strong authentication.
Enable two-factor authentication.
Save backup codes securely.
Regularly back up important data.
Know the telco hotline or nearest service center.
Avoid leaving the phone unattended in public places.

XXX. Legal Consequences for the Thief or Unauthorized User

A person who steals or uses a stolen phone may face criminal liability. Depending on the conduct, possible legal issues may include:

Theft or robbery
Fraud
Identity theft
Unauthorized access
Misuse of access devices
Cybercrime offenses
Data privacy violations
Estafa or swindling
Falsification or impersonation
Receiving or dealing in stolen property

The exact charge depends on the facts, evidence, value of the property, method of taking, and later use of the device or accounts.

XXXI. Practical Legal Strategy

The owner’s strategy should be to establish three things:

First, that the phone and SIM were stolen or lost at a specific date, time, and place.

Second, that the owner promptly reported the incident and took steps to block, suspend, or secure the device, SIM, and accounts.

Third, that any subsequent use of the device, SIM, number, accounts, or data was unauthorized.

This record can be crucial if there are later disputes, unauthorized financial transactions, scam reports, or investigations.

XXXII. Conclusion

Blocking a stolen mobile phone in the Philippines is not a single act. It is a coordinated legal, technical, and security response.

The owner should immediately suspend the SIM, request replacement, attempt remote lock or erase, secure online accounts, notify banks and e-wallet providers, file a police report, preserve evidence, and request IMEI blocking where available. A police report, telco reference number, IMEI record, and proof of ownership are especially important.

The goal is not only to make the phone unusable, but also to protect the owner’s identity, finances, privacy, and legal position.