Martin Lewis' Mobile Security Alert: Protecting Devices Against Theft and Scams

Financial expert Martin Lewis has issued an urgent warning to mobile phone users, advising them to take immediate steps to protect their devices from theft and scams. The recommendation centers around dialing a simple five-digit code to retrieve critical device information that can aid in recovery and fraud prevention¹. This advice comes amid a reported 40% rise in phone thefts linked to financial data breaches³.

The IMEI Code Protection Method

Lewis specifically recommends dialing *#06# on any mobile device (iPhone, Samsung, or Google) to display the International Mobile Equipment Identity (IMEI) number². This unique 15-digit identifier acts as a fingerprint for mobile devices. Users should screenshot this number and email it to themselves for safekeeping. In cases of theft, the IMEI can be provided to law enforcement and mobile carriers to help track the device and potentially block it from being used on cellular networks.

The IMEI serves multiple security purposes. Mobile network operators maintain databases of stolen devices using IMEI numbers, making it harder for thieves to resell or reactivate stolen phones. Additionally, many insurance companies require the IMEI when filing theft claims. Security professionals note that while IMEI blocking isn’t foolproof (as devices can be sold for parts or used on Wi-Fi only), it remains a valuable first line of defense.

Complementary Security Measures

Beyond recording the IMEI, Lewis advocates for several additional security measures. These include enabling biometric security (Face ID or fingerprint recognition) for banking apps, using different PINs for device unlock versus app access, and disabling preview notifications to prevent two-factor authentication codes from appearing on lock screens².

For enterprise security teams, these recommendations align with broader mobile device management strategies. The rise in phone thefts targeting financial data suggests organized criminal operations rather than opportunistic theft. Security operations centers should consider monitoring for unusual device access patterns following reported thefts, as criminals may attempt to access corporate resources through compromised mobile devices.

Recommended Mobile Security Settings
Platform	Feature	Activation Method
iPhone	Stolen Device Protection	Settings > Face ID & Passcode
Android	Theft Detection Lock	Settings > Security > Device Lock
All Devices	Remote Tracking	Find My iPhone / Google Find My Device

Scam Call Mitigation

Lewis’ warning extends to phone scams, where fraudsters compile “hit lists” of individuals who answer unknown calls¹. These lists are then sold to other scammers, leading to increased fraudulent attempts. Security analysts observe that such tactics often precede more sophisticated social engineering attacks targeting corporate environments through employees’ mobile devices.

For organizations, this underscores the need for comprehensive security awareness training that covers both professional and personal device usage. Many advanced persistent threat groups initiate compromises through personal devices before pivoting to corporate networks. Implementing strict bring-your-own-device (BYOD) policies and mobile threat defense solutions can help mitigate these risks.

Implementation and Monitoring

Security teams should consider the following actionable steps:

Document all corporate mobile device IMEIs in asset management systems
Implement geofencing and unusual activity alerts for mobile access to sensitive systems
Conduct regular audits of mobile device security settings across the organization
Integrate mobile threat intelligence into existing security monitoring systems

The combination of basic user education (like Lewis’ IMEI recommendation) and enterprise-grade mobile security controls creates a layered defense against the growing threat of device theft and mobile-based fraud. As criminals increasingly target mobile devices as gateways to both personal and corporate data, these measures become essential components of comprehensive security postures.