Crypto app locked or phone changed? SA recovery guide

If your crypto app is locked or you changed phones, secure your number, email and exchange login before you try to restore anything. If the phone is lost, stolen or suddenly loses service, treat it as a security problem first and a crypto problem second.

The fix depends on what you used: an exchange app, a self-custody wallet app or an authenticator app. They recover in different ways, and mixing them up is where many first-time smartphone buyers get stuck.

Work out which app you are trying to recover

This is the first split that matters. An exchange account is usually recovered through the company’s login and identity checks, while a self-custody wallet is usually recovered with a backup phrase or backup method you set up earlier.

• Exchange app: You sign in with your email, phone number and password, then complete two-factor authentication or identity checks.
• Wallet app: You usually restore with a recovery phrase, seed phrase or another wallet backup option.
• Authenticator app: This is not your wallet. It only generates the changing six-digit login codes for other accounts.

If you are not sure which app you had, check your Google Play or App Store history, your email inbox for account messages, and any notes you made when you set it up. If you need a broader emergency checklist, read Crypto app locked or phone lost? What to do next in South Africa.

Do these six things first if your phone is lost or stolen

If the phone is missing, assume someone may try to use your SIM, your email and any apps that were already signed in. Move quickly and do the steps in order.

1. Lock or erase the phone remotely. Use Find My on iPhone or Find My Device on Android from another trusted device.
2. Call your network. Ask Vodacom, MTN, Telkom, Cell C or Rain to block the SIM if you think the phone was stolen or your line suddenly stopped working.
3. Change your main email password. Your email is often the reset key for exchange accounts.
4. Change your exchange password. Do this from a device you trust, not from a borrowed phone.
5. Check for login alerts. Look for password reset emails, new-device alerts and SIM change messages.
6. Contact your bank if needed. If your banking app was on the phone, ask your bank what extra blocks or checks they can add.

If your number stops working but the phone is still in your hand, treat that as a possible SIM-swap warning. It can also be a network fault, but you should still act fast until your network confirms what happened.

Worked example for a South African reader

Example: You lose a Samsung Galaxy A56 on a taxi. The phone starts from R7,224 at Takealot, and one tracked Telkom deal is R429/month over 36 months with 2GB data.

Your best order is: remote lock the phone, call Telkom to block the SIM, change your Gmail or iCloud password, then change your exchange password and sign out old devices from the account. Do not start by reinstalling wallet apps on a new phone until your number and email are secure.

How to recover an authenticator app on a new phone

This is where many people panic. If your old phone had Google Authenticator, Microsoft Authenticator or a similar app, losing that phone can lock you out even when your password is correct.

The fix depends on whether you still have the old phone, whether you transferred the authenticator before changing devices, and whether you saved backup codes when you turned on two-factor authentication.

If you still have the old phone

• Open the authenticator app and look for Transfer, Export or Move accounts.
• Install the same authenticator app on the new phone.
• Import the accounts and test at least one login before wiping the old phone.

If the old phone is gone

• Look for saved backup codes in your password manager, printed notes or secure document storage.
• Use the exchange or app’s official account recovery process to reset two-factor authentication.
• Be ready for identity checks and a delay before withdrawals or sensitive changes are allowed again.

Do not trust anyone on Telegram, WhatsApp or X who says they can restore your authenticator for you. If they ask for a one-time code, recovery phrase or ID copy in chat, stop.

If your wallet app itself is failing to restore on a replacement phone, read Crypto wallet app not working on your new phone? Start here.

What actually works for wallet recovery

For self-custody wallets, recovery usually depends on your recovery phrase or another backup method you enabled before the problem started. If you do not have either, there may be no support desk that can restore access for you.

This is the hard truth for beginners. A self-custody wallet gives you control, but it also gives you the recovery job.

Use this restore checklist

• Install the correct wallet app from the official Google Play or Apple App Store listing.
• Choose Restore, Import or I already have a wallet, not Create new wallet.
• Enter the recovery phrase in the exact order.
• Make sure you are restoring the right wallet type and network.
• Wait for balances and tokens to sync before assuming funds are gone.

What you should not do

• Do not factory-reset the old phone until you have confirmed the wallet works on the new one.
• Do not save your seed phrase in plain text in Notes, screenshots or chat apps.
• Do not hand the phrase to a repair shop, kiosk or online helper.
• Do not type the phrase into a website sent by email, ad or direct message.

If you are buying a replacement phone mainly to get back into your apps, you do not need a flagship. A Xiaomi Redmi Note 15 starts from R4,999, while the Apple iPhone 17e starts from R16,499. Either is enough for recovery, authenticator apps and password managers if you keep the software updated and lock the phone properly.

Spot SIM-swap warning signs before your accounts are hit

A SIM swap is when someone gets your number moved to another SIM. If that happens, they may try to intercept SMS codes, reset passwords and break into your email, exchange account and bank app.

That is why SMS codes are weaker than authenticator apps. SMS is better than no second factor, but it should not be your only line of defence for important accounts.

Ask your network what extra checks they offer for SIM changes. Also ask your bank what extra notes or profile protections they can add if you suspect fraud.

Set up your next phone safely before you install crypto apps

Do the basic phone security work first. For most people, that matters more than buying a faster or more expensive device.

• Set a strong screen lock. A longer PIN is better than a simple four-digit code.
• Turn on device tracking and remote wipe.
• Install system updates before you add banking or crypto apps.
• Use a password manager instead of reusing passwords.
• Choose authenticator app codes instead of SMS where the service allows it.
• Store backup codes offline in a safe place.
• Test recovery on your email account before you need it in a panic.

If you want a wider phone-security checklist, read Lock Down Your Phone and Bank Apps Before Holiday Travel and Lock Down WhatsApp, TikTok, Instagram and Streaming Apps.

For first-time smartphone buyers, a budget or mid-range phone is usually enough. You do not need a foldable or flagship to manage crypto apps safely. What matters is updates, a strong lock screen, a backup plan and careful app setup.

Frequently asked questions