Lost or stolen phone: how to protect your betting account
Secure the line first, then the wallet, then the betting account. Ask your mobile network to block the SIM, change your mobile-money PIN and your account password from another device, and tell the operator's customer care centre in writing. Report the theft to the police and keep the reference.
Why a lost phone is a betting-account problem
For most players the phone is the account. It holds the app, the saved login, the text messages that carry one-time codes and the SIM that the mobile wallet is attached to. Whoever holds the handset may be able to reach all of these at once.
That is why the order of your actions matters. The guide on protecting a gambling account from SIM swap explains how a phone number becomes the key to both the wallet and the account, and a lost handset puts that same key in someone else's hand.
This guide describes the sequence in general terms. It does not quote network codes or hotline numbers, because those can change; take them from your network's own website, shop or the printed material that came with your SIM.
The first hour: steps in order
Work from the line outward. A thief who still receives your text messages can reset a password you have just changed.
| Step | Action | Why it comes here |
|---|---|---|
| 1 | Borrow another phone and contact your mobile network through its official channels. Ask for the SIM to be blocked and for a replacement SIM on the same number | It stops calls, text messages and one-time codes reaching the thief |
| 2 | Lock or locate the handset using the tools of your phone's maker, and sign out of your accounts remotely if the tool allows it | Reduces what can be read from the device itself |
| 3 | Change the mobile-money PIN once you have the line back, and ask your provider whether any transaction happened after the loss | The wallet is the route money leaves by |
| 4 | Change the password of the email account linked to the betting account | Password resets are sent to the email |
| 5 | Change the betting-account password from another device and sign out other sessions if the operator offers that | Cuts off the saved login on the lost handset |
| 6 | Contact the operator's customer care centre in writing and ask it to secure the account and stop pending withdrawals | Only the operator can freeze the account |
| 7 | Report the loss or theft at a police station and note the reference number | Creates a dated record you can show to the network and the operator |
Do not search the internet for a support number and call whatever appears. Fake support lines exist; the guide on recognising betting phishing SMS shows how impostors use urgency to collect codes.
What exposes the account on a lost phone
Not every exposure is equal. This table separates what a thief can reach from what you can close, and how.
| What is on the phone | Risk if the phone is lost | How to close it |
|---|---|---|
| The SIM card | One-time codes and calls reach the wrong person | Network blocks the SIM and issues a replacement |
| Mobile-wallet access | Money can be sent if the PIN is known or guessed | Change the PIN, review the wallet statement |
| Betting app, already signed in | Bets and withdrawals without a password prompt | Change password, sign out sessions, ask the operator to secure the account |
| Email app, already signed in | Password resets for every account | Change the email password first |
| Photos or notes holding ID details or passwords | Identity theft, later takeover attempts | Treat every saved password as exposed and change it |
For the path money takes between the wallet and the account, see how mobile-money deposits work.
What to put in your message to the operator
Write rather than only phone, so that there is a dated record. State your registered name and phone number, the time you lost the phone, and the transactions you did not make with their amounts in KES and codes.
Ask for three things: that the account is secured, that pending withdrawals are stopped, and that you receive a written outcome. Never send your password or a one-time code, even to someone claiming to be the operator.
Illustrative example: the phone is stolen at 18:00 and you notice at 20:30. Two withdrawals of KES 1,500 and KES 4,000 left the account before you wrote to the operator. The amount to report is 1,500 + 4,000 = KES 5,500, listed as two separate transactions with two codes.
When you get a new SIM and handset
A replacement SIM restores the number, but it does not restore trust in everything attached to it. Before you reinstall the betting app, check the wallet statement and the account history line by line, and compare each entry with what you did yourself.
Install the app only from an official store or the operator's approved domain, and sign in with the new password. If anything looks unfamiliar, such as a new withdrawal destination or a changed email, raise it with the customer care centre in writing before you deposit again.
Expect messages from scammers in the days after a loss. Some pose as the network, the police or the operator and claim they have found your phone. None of them needs your PIN, password or a code to return a handset, so treat any such request as a fraud attempt.
What the rules require of operators
The regulations do not give a lost-phone procedure, but they set duties that apply when your account is taken over. The table lists those verified in the Act and regulations.
| Duty | Where | What it means for you |
|---|---|---|
| Maintain a customer care centre within Kenya to monitor and respond to consumers' issues | Act s.68(8) | You have a place to raise the matter |
| Resolve complaints or disputes before they are reported to the Authority, and refer unresolved matters to it | Reg. 9(2)(c) and (e) | Ask for the matter to be logged as a complaint |
| Encrypt player personal and financial data in transit and at rest | Reg. 42(1) | Stored data is expected to be protected, not only the login |
| Online payments with multi-factor authentication, such as one-time passwords or biometric verification, to prevent unauthorized payments (set out for promotions) | Reg. 49(c) | The regulations name this as a payment safeguard |
| Keep platforms secure from cyber-attacks and hacking and keep an incident response report of breaches and fraudulent digital activity | Reg. 50(1) and (3) | Your incident should be recorded |
| Report fraud and malpractice to the Authority within twenty-four hours | Reg. 91(2); reg. 93(1) | Fraud is not a private matter for the operator |
Changing the number or the account afterwards
If you cannot recover the old number, the operator will need to confirm who you are before it changes the contact details. Regulation 85(1) requires a mandatory identity check and regulation 85(4) says verification includes official identification documents. Expect to be asked for your ID, and keep it ready.
The guide on changing the phone number on a betting account covers that process, and what to do if a betting account is hacked covers the steps if money has already left the account.
Habits that limit the damage of a lost phone
- Use a screen lock and a separate wallet PIN. A thief who gets past one should not have the other.
- Do not save passwords in notes or photos. Anything on the handset is exposed once it leaves your hand.
- Keep only the balance you need in the account. Withdraw what you are not using.
- Set deposit limits. Regulation 87(2) requires operators to provide deposit limits on a daily, weekly and monthly basis, and a limit also caps what a thief can put in.
- Keep your ID number and a second contact route on file. It makes later identity checks easier.
Gambling is addictive. Play responsibly, and only with money you can afford to lose.
Questions and answers
What should I do first when my phone is stolen?
Use another phone to contact your mobile network and ask for the SIM to be blocked, so that calls, text messages and one-time codes cannot be received by the thief. Then secure the wallet and the betting account, in that order.
Can the operator freeze my betting account?
Only the operator controls the account. Section 68(8) of the Gambling Control Act, 2025 requires an online operator to maintain a customer care centre within Kenya to monitor and respond to issues raised by consumers, so that is where to ask for the account to be secured and pending withdrawals to be stopped. The Act and regulations read for this guide do not set a deadline for doing so.
Is the operator required to report fraud on my account?
Regulation 91(2) of the Gambling Control (Conduct of Gambling Operations) Regulations, 2026 says a licensee shall report fraud and malpractice to the Authority within twenty-four hours. Regulation 93(1) adds suspicious activity and transactions, within twenty-four hours of becoming aware.
Will I get back money withdrawn by the thief?
The Act and regulations read for this guide contain no refund rule for stolen phones. The outcome depends on the operator's terms and its investigation, so ask for the decision in writing.
Is a locked screen enough protection?
It helps, but it does not replace the other steps. A thief may keep the handset and use the SIM in another device, and a password saved in a browser or app may still be reachable. Block the SIM and change the passwords regardless.
Should I keep betting from a new phone straight away?
Settle the security problem first. Confirm with the operator that the account is secure and that nothing was taken, then check your history before you use it again. Gambling is addictive: play responsibly.
Sources
- Gambling Control Act, 2025 (No. 14 of 2025), s.68(8), accessed 2026-10-13
- Gambling Control (Conduct of Gambling Operations) Regulations, 2026, rr.9, 42, 49, 50, 85, 91, 93, accessed 2026-10-13