South Africans are being warned to take extra precautions with their smartphones, as thieves are increasingly using stolen devices to access victims’ bank accounts and personal data.

According to Investec’s head of fraud risk, Kevin Hogan, and cybersecurity specialist Anna Collard, criminals can bypass weak phone passwords within minutes — even on devices protected by PINs or facial recognition.

“Your phone is effectively the key to your finances,” Hogan said on Investec’s Everything Counts podcast. “Many people wrongly assume a password makes their phone secure, but short PINs can be cracked in under 10 minutes.”

He advised users to switch from 4- or 6-digit codes to long alphanumeric passwords and enable facial recognition, which remains far harder to breach.

What to Do If Your Phone Is Stolen

Collard stressed that losing a phone can become a full-blown crisis because it holds access to banking apps, emails, digital wallets, and social media.

If your device is stolen:

1. Immediately contact your bank to delink the device from your accounts.
2. Blacklist your SIM and phone with your mobile provider.
3. Change all passwords and remove the device from your Apple ID or Google account.

Hogan explained that banks link transactions to the physical device, so criminals can make purchases that appear legitimate if the handset isn’t delinked.

Victims should also beware of follow-up scams. Fraudsters often send fake emails from “Apple” or “Google,” urging victims to verify their accounts. In reality, these phishing messages are designed to steal more information.

“Your bank accounts should be your top priority,” Collard said. “But remember, access to your email or WhatsApp can be just as dangerous — scammers can impersonate you to trick friends and family.”

The experts agree: the best defense is a strong password, facial recognition, and swift action if your phone is ever stolen.

Whatsapp