Crypto app locked or phone lost? What to do next in South Africa

If your phone is gone or your crypto app will not open, secure your mobile number, email and exchange login before you try to recover the wallet. For most South Africans, the safest order is: stop SIM-swap risk, change your email password, lock down the exchange account, then deal with the wallet or authenticator app.

If you use a self-custody wallet, the recovery phrase matters more than the phone. If you use an exchange app, your email and two-factor login usually matter most.

First, work out what you have actually lost

People often mix up two different problems: losing the phone, and losing access to the crypto account on the phone. The fix is not the same.

If you use an exchange app

This is the kind of app where you sign in with an email address, password and a one-time code. Your funds are tied to the account, not only to the handset, so your first job is to stop password resets through your phone number or email.

If you use a self-custody wallet

This is the kind of wallet that gave you a recovery phrase when you set it up. If you still have that phrase, you can usually restore the wallet on another device. If you do not have it, losing the phone can mean permanent loss.

Your first 15-minute checklist

1. Call your network and ask them to block the SIM or add stronger checks on the line.
2. Change your main email password from another trusted device.
3. Log in to your exchange account and remove the lost phone from trusted devices if that option exists.
4. Check whether your authenticator app was backed up or transferred to another device.
5. Only then start wallet recovery.

How to cut SIM-swap risk on South African networks

A SIM-swap attack usually starts when someone gets your number moved to another SIM. Once they control the number, they try password resets on your email, exchange and banking apps. That is why SMS one-time pins are a weak choice for high-risk accounts.

Your best move is to stop relying on SMS for crypto logins where the app allows it. Use an authenticator app instead, and keep the backup codes offline.

What to ask your network

• Vodacom, MTN, Telkom, Cell C and Rain: ask what SIM-swap checks, account notes or in-store verification options they offer on your line.
• Ask the agent to note that you want stricter verification before any SIM change.
• Make sure your network account PIN or password is not easy to guess.
• Remove old phone numbers from your email and exchange accounts if you no longer use them.

If your number suddenly stops working and there is no clear outage, treat it as urgent. Get onto Wi-Fi or another device straight away and start changing passwords.

If you are new to smartphones, our first-time buyer guide to cheap phones covers the basics that matter when a device is lost or stolen.

Set up an authenticator app without locking yourself out

For most people, an authenticator app is safer than SMS codes. The code stays on the phone and is not tied to your mobile number, so a SIM swap does not automatically hand it over.

Best setup order for beginners

1. Open your exchange app and go to Security or Account security.
2. Choose Authenticator app instead of SMS if both are available.
3. Scan the QR code with your authenticator app.
4. Write down the backup or recovery codes shown during setup.
5. Store those codes offline, not only on the same phone.
6. Test one login before you sign out of other devices.

The most common mistake is setting up the authenticator app and skipping the backup codes. If the phone is stolen, reset or damaged, you may face a slow account recovery process.

Where to keep backup codes

Use paper and keep it somewhere private and dry. If you want a second copy, keep it in a different safe place. Do not keep the only copy in your gallery, notes app or a WhatsApp chat.

If you want a low-cost backup phone for recovery, the Xiaomi Redmi Note 15 starts from R4,999 at Incredible Connection, and the Samsung Galaxy A37 5G starts from R5,791 at Takealot, based on our checks from 5 October 2026. A spare device helps only if you set it up before something goes wrong.

Recover a self-custody wallet the right way

If you use a self-custody wallet, the recovery phrase is the key. The phone is just one way to access it.

If you still have the recovery phrase

1. Get a trusted replacement phone or spare device.
2. Install the same wallet app from the official app store.
3. Tap Restore wallet or Import existing wallet.
4. Enter the recovery phrase exactly as written.
5. Create a new device PIN or password.
6. Move funds to a new wallet if you think the old phrase was exposed.

If someone may have seen or photographed your recovery phrase, do not keep using that wallet for long. Restore access, then move the funds to a new wallet with a new phrase as soon as you can.

If you do not have the recovery phrase

Be careful here. Many self-custody wallets cannot be recovered without it. If the wallet did not offer a separate backup method and you never wrote the phrase down, there may be no reset button that brings the funds back.

If you only forgot the wallet app PIN

Some wallet apps let you reset the app on that device and import the wallet again with the recovery phrase. That helps only if you still have the phrase.

Secure an exchange account after a lost phone

If your crypto is on an exchange, focus on account controls first. In many cases, you can recover access without the original phone if your email is secure and you can pass the exchange's identity checks.

Do these steps in this order

1. Change your email password first.
2. Turn on two-factor authentication with an authenticator app if the account still uses SMS.
3. Sign out of other sessions or remove old devices.
4. Change your exchange password to a unique one.
5. Check withdrawal address settings and anti-phishing options if the exchange offers them.
6. Review recent logins, password reset emails and withdrawal history.

If your email account is weak, your exchange account is weak. For many people, email is the real master key because it handles resets for banking, crypto and shopping accounts.

Worked example: safer recovery on a South African network

Example: You lose a budget Android phone in a taxi. Your number is on Vodacom, your exchange still sends SMS codes, and your main email is open on your laptop at home. First, call Vodacom and ask them to block the SIM and add stricter verification on the line. Next, change the email password on the laptop. Then log in to the exchange, switch from SMS to an authenticator app, write down the backup codes on paper, and sign out the lost phone.

If you need a replacement, our tracked prices show the Xiaomi Redmi Note 15 from R4,999 and the Samsung Galaxy A37 5G from R5,791. If you prefer a contract, our live deals include the Xiaomi Redmi Note 15 on Vodacom at R349 per month over 36 months with 1GB data, and the Samsung Galaxy A37 5G on Cell C at R349 per month over 36 months with 1.5GB data. Check our latest phone contract deals before you sign.

What to set up before anything goes wrong

The best recovery plan is simple and a bit boring. You do it once, and it saves you later. This matters even more if this is your first smartphone.

If you want more help with safer setup, our guide to best value phone setup for older South Africans in 2026 covers practical basics that also help first-time smartphone users. You can also browse more How-To & Tips articles for step-by-step phone help.

Frequently asked questions