ThummerStolen Phone and Venmo, Zelle, or Cash App: What to Do
If your phone was just stolen with Venmo, Zelle or Cash App on it, the clock matters more than the phone. U.S. rules tie part of your protection to how fast you report. Here's what to do for each app, in order, from another phone or computer. (How thieves get in is covered in how thieves drain bank apps from a stolen phone; for locking the phone itself, see the first 10 minutes after a phone is snatched.)
This is general consumer information, not legal or financial advice.
Step 1: Call your bank (this is also your Zelle call)
Zelle usually lives inside your bank's app, so your bank is where you report it. Zelle says its partner financial institutions handle all enrollment and payment related issues in their own apps and online banking, and for Zelle used through a bank it says to call the number on the back of your debit card. If you suspect fraud or a scam, Zelle says to report the transaction directly to your bank or credit union.
Tell them the phone was stolen, ask how they can protect the account and its online access, and flag any transfers you don't recognize. Note the date, time and who you spoke with. Under Regulation E, notice can be given in person, by telephone, or in writing, so a phone call counts.
If you have debit or credit cards linked to Venmo or Cash App, call those issuers too.
Step 2: Venmo
Sign out remotely. Venmo's lost-or-stolen-phone guide says to sign in on Venmo's website from a computer you've used with Venmo before, open Settings, then Security, and click Forget to end open sessions. Change your password if you think it may have been compromised. If you can't sign in without your phone, Venmo says to contact support, and that you may need to call.
Contact support. Venmo's contact page lists General Support at (855) 812-4430, every day from 8 a.m. to 8 p.m. Central. For unauthorized activity, Venmo asks you to report it as soon as possible and to have the date, amount and recipient's username ready.
Its lock, for next time. Venmo's Passcode setting, under Me > Settings (gear icon) > Preferences, means Venmo asks for it every time you open the app, and you may be asked to confirm it when sending payments. Face ID or fingerprint unlock can be used with it.
Step 3: Cash App
Contact support. Cash App's security page lists phone support at 1 (800) 969-1940, 8 a.m. to 9:30 p.m. ET daily, plus in-app chat around the clock. Its guide on scams tells users to report a transaction from your profile in the app, which you can't do from a stolen phone, so the phone line is the fallback.
Log the phone out. Cash App's help center describes removing a device in the app: Profile, then Your Devices, pick the device, then Log out device. That page doesn't say whether this works from the website or address a stolen phone specifically, so if you're signed in to Cash App on another device, check there, and ask support what else they can do to secure the account.
Know the limits. Cash App says it offers Zero Fraud Liability on unauthorized Cash App Card transactions reported within 60 days (article dated August 4, 2026). For person-to-person payments you authorized, it says reimbursement depends on the circumstances, and a P2P payment is usually final once it goes through.
Its lock, for next time. Security Lock requires your face, fingerprint or PIN before any payment goes through.
Step 4: Secure your email and phone number
Password resets and security codes go to your email and texts. If the thief can read them, a new password may not keep them out.
Sign the stolen phone out of your email. For a Google account, Google's help page says to open your Google Account, go to Security, find Your devices, choose Manage devices, select the lost phone and choose Sign out. Then change your password.
Lock down recovery options. The FTC (page updated June 2026) advises making sure recovery email addresses and phone numbers are ones you entered and can still reach, and turning on two-factor authentication where it's offered.
Call your carrier. Google notes your carrier can turn off your SIM so someone else can't make calls or send messages.
Your rights: unauthorized transfer or scam?
This distinction decides a lot.
Unauthorized means you didn't send it. Regulation E defines an unauthorized transfer as one initiated by someone other than you, without actual authority, and from which you get no benefit. The CFPB's official FAQs (updated January 2025) say this includes transfers by someone who obtained your access device through fraud or robbery, and that a consumer's negligence cannot be used as the basis for imposing greater liability. The FAQs also say a P2P payment provider can count as a financial institution under the rule if it meets the definition.
A scam means you sent it. Zelle puts it plainly: fraud is when someone gained access to your bank account and made an unauthorized payment; a scam is when you knowingly sent money and didn't get what you expected. Unauthorized payments typically qualify for reimbursement, Zelle says, while only certain impostor scams do. On its fraud explainer, Zelle adds that if you authorized a payment, you may not be able to get your money back. A stolen phone usually puts you in the first group. But if someone later poses as your bank and talks you into sending money, that can land in the second.
Reporting timelines matter. Regulation E, as published by the CFPB, sets these consumer liability limits. The first two apply when an access device (a card, code or other means of access) is lost or stolen:
- Report within two business days of learning of the loss or theft, and your liability is capped at the lesser of $50 or the amount taken before you reported.
- Report later, and the cap can rise to $500.
- For unauthorized transfers that appear on a statement, report within 60 days of the statement being sent. After that, you can be liable for later transfers that timely notice would have prevented.
If extenuating circumstances delay your notice, the institution must extend these deadlines to a reasonable period; the CFPB's page gives extended travel or hospitalization as examples. How this applies to your account depends on the provider and the facts, so ask in writing what protections apply.
If you get pushback
Keep records of every call, chat and email. If a bank or payment company doesn't resolve your claim, you can complain to the CFPB, which accepts complaints about checking and savings accounts and money transfers, among other products. The CFPB says most companies respond within 15 days.
Before it happens again
Turn on each app's own lock, use a long phone passcode, and keep your phone's built-in theft protection on (see our Android theft protection explainer). Some Android owners add a tool for the moment of the grab; one option among several is Thummer, which locks the phone within five seconds if the owner's thumb lifts off an on-screen bubble. Traveling soon? Our plan for a phone stolen abroad covers carriers and embassies, and New Yorkers can find local tips in our New York phone theft guide.
The bottom line
Call your bank first, then Venmo and Cash App, then lock down your email and phone number. Report fast, keep records, and distrust anyone who asks you to send money to "fix" things.