A cracked screen or charging fault becomes more worrying when your phone also holds your bank, cards and authentication codes. Banking app security needs attention before the device goes into a parcel, especially if it is your only way to approve payments.
The good news is that a few careful checks protect both your money and data. Mobile banking may be needed for payment approvals, account access and security codes. You don’t need to wipe the phone in a panic or share every password you own.
Start while the handset still has power and a working display.
Key takeaways
Before posting a phone, protect the accounts that rely on it as well as the files stored on it.
- Back up photos, messages, contacts and important files. From a trusted device, verify access to your email, bank and authentication method.
- Use a strong screen lock and biometric unlock where appropriate. Review saved passwords, and never give a repairer your login credentials.
- Check your security settings, enable account alerts and confirm multi-factor authentication still works if the SIM or eSIM is unavailable.
- Keep your Apple Account and Google Account credentials private. Never share them with a repairer.
- Remove payment cards from Apple Wallet or Google Pay, along with the physical SIM and memory card, where appropriate.
- Enable Find My iPhone or Find My Device. Consider a remote wipe if the phone is lost and you can’t recover it.
- If the phone goes missing, contact your bank and mobile carrier promptly.
- After repair, check banking access, payment approvals and the screen lock before using the phone normally.
- If the phone is hot, swollen, wet or lifting at the screen, switch it off and contact the repair team before posting.
Banking app security begins with a proper diagnosis
A drop can damage more than the glass. It may affect the display, battery connection, charging socket, camera, antenna or internal flex cables. Recording the symptoms helps us test the right area without guesswork.
Separate visible damage from hidden faults
Screen or display fault symptoms include flickering, coloured lines, black patches, missed touches and a phone that rings but appears dead. Those signs can point to a damaged display rather than a flat battery.
For phone hardware troubleshooting, UK customers should note whether the device vibrates, makes sounds, gets warm or connects to a computer. A device that will not turn on or will not charge needs a diagnosis that separates a dead screen, battery issue, port fault and wider board damage.
| Device | Useful detail to record before posting |
|---|---|
| iPhone | An iPhone component fault after a drop may show up as a black display, poor charging or an unresponsive camera. If it needs professional attention, you can book an iPhone repair. |
| Samsung Galaxy | A Samsung component fault after a drop can affect the display, charging port, fingerprint sensor or internal connection. You can Book a Samsung Repair once you have noted the symptoms. |
| Google Pixel | A Google Pixel component fault after a drop may look like a restart loop, failed button or display that remains black. Use the option to book a Google Pixel repair if the handset needs inspection. |
| iPad | For an iPad component fault or diagnosis, record whether touch, charging, speakers and rotation still work. You can book an iPad repair when the fault needs a workshop check. |
A clear symptom history gives us a better starting point than “it stopped working”. Mention any liquid exposure, previous repair, bent frame or sudden heat.
Keep the phone switched off when the battery looks unsafe
Do not keep trying to revive a phone with a lifting screen, swollen battery, burning smell or unusual heat. Stop charging it, switch it off if safe to do so and avoid pressing the screen back into place.
A common one we see is a Galaxy with a small corner crack after a drop. It still works for a day or two, then starts restarting because the impact disturbed more than the outer glass. That is why a proper fault description matters before the parcel leaves home.
Secure access before postal repair
Your banking app may use biometric recognition, but your phone number and email account often control account recovery. Treat them as part of your banking setup.
Back up data and test your recovery route
Back up the phone to iCloud, Google One, Google Drive or an encrypted computer backup. Banking apps usually won’t restore an active session, so test mobile banking and email access from a trusted device or browser before posting the phone.
A banking app may require customer authentication or two factor authentication through a registered number, authenticator app, recovery code or trusted devices. Verify your multi-factor authentication route before removing the handset from use.
Also confirm that your recovery email works and that you can access any recovery codes elsewhere. A broken phone is annoying. A broken phone that holds your only approval route is a bigger faff.
Check your security settings before sending the handset away. Use a unique screen lock, choose a suitably short auto-lock period, and test Face ID, Touch ID or Android biometric recognition.
Review saved browser passwords and autofill entries before repair. Keep strong passwords in a password manager, but don’t delete the only copy until you’ve confirmed recovery access.
If the handset still works, remove cards from Apple Wallet or Google Pay where you can add them back safely later. Sign out of banking apps or remove saved accounts where appropriate. Don’t delete your Apple or Google account without understanding the effect on Find My, Find My Device and activation protection.
Take out the physical SIM and any microSD card. For an eSIM, don’t delete the plan blindly. Follow official mobile-carrier guidance if your number is needed for authentication.
Give access for testing, not for your accounts
A repairer may need a temporary device passcode to test touch, cameras, speakers, charging and biometric prompts. They don’t need to open your bank, email, messages or photo library for those checks.
Never put banking login credentials in the parcel or order notes. A legitimate technician doesn’t need your bank PIN, online banking password, Apple Account details, Google Account details or email password.
A device passcode can help test hardware. An account password gives access to your wider digital life, and should stay private.
If a passcode is required, share it only through the repairer’s requested method. Change it after the phone returns, then re-check Face ID, Touch ID or your preferred biometric unlock.
Do not assume an app does all the security work
Banking apps add useful safeguards, including biometrics, device recognition and payment approval prompts. These security features are only one layer of banking security, alongside careful behaviour, account recovery and device protection.
Mobile app security depends on the bank’s customer authentication, your phone’s screen lock and its encryption technology, not the app alone. No app can protect you if a criminal talks you into making a transfer or gains control of the email and phone number behind it.
Apps and browsers both need sensible use
Mobile apps often keep banking activity within a controlled connection and can tie approval to the device’s biometric security. A current browser on a trusted device can also be safe, provided you use the bank’s real website.
We wouldn’t say an app is automatically safer in every situation. What matters is the combination of a screen lock, account recovery, trusted devices and your response to suspicious messages.
The consumer group Which?’s 2024 online banking security test found TSB had the lowest app score at 54%, including a medium-risk issue involving sensitive data handling. Treat the results as a prompt to review protection, not proof that one app is unsafe.
Avoid fake apps, phishing links and public Wi-Fi
Only download a banking app through official app stores, such as Apple’s App Store or Google Play, then check the publisher name against your bank’s official website. Never install banking software supplied through a message, advert or caller.
Install software updates and security patches from the device maker. Malicious software can capture information or interfere with payment approvals.
Fraudsters often pose as banks, delivery firms or mobile networks in phishing attacks, trying to make you reveal a code or approve a new device. The NCSC’s phishing scam guidance explains how to report suspicious messages and sites.
Avoid banking over open public Wi-Fi where possible. Mobile data or a trusted home connection reduces the chance of joining a rogue hotspot that pushes you towards a fake login page.
Pack the device with a useful paper trail
Postal repair can be straightforward when the device, fault notes and packaging are all prepared properly. The phone should arrive protected, but the information around it matters too.
Photograph and identify the handset
Take clear photos of the front, rear, corners, camera area and charging port. Record the IMEI or serial number, exact model and existing damage. You can find the IMEI in Settings on a working phone, or often on the SIM tray or original box.
Remove the case, screen protector and accessories unless the fault involves a charger or cable. Keep the proof of posting and your tracking reference until the phone is returned.
Phone Repair Direct offers a UK mail-in phone repair service with tracked Royal Mail postage and transit cover. We aim to complete suitable repairs promptly after arrival, although the device condition and parts availability can affect the timing.
Write fault notes that help testing
Include the order details and a short description of what happened. “Dropped on the bottom-right corner, screen flickers, still receives calls” is far more useful than “screen broken”.
Tell us if the phone has been wet, has stopped recognising a SIM, only charges at an angle or was previously repaired. Do not put a passcode on the outside of the parcel.
Act quickly if the phone goes missing
A delayed parcel is one thing. A lost or stolen device with a live SIM and banking access calls for fast action.
Lock the phone and secure the number
On an iPhone, use Find My iPhone from another trusted device. On Android, use Find My Device. These official Apple and Google services let you mark the phone as lost or lock it.
If you can’t recover the handset, consider a remote wipe. First, check that backups and account-recovery arrangements are ready. Don’t remove the device from your Apple or Google account prematurely, as this may weaken activation protection.
Contact your mobile network or carrier to suspend a physical SIM or secure an eSIM. SMS codes can otherwise help an attacker take over accounts. Secure your email and Apple or Google account access too, reducing the risk of identity theft.
Then call your bank or other financial institution using the number printed on your card or listed on its official website, not a message or caller. Ask how to secure mobile and online banking, reset or re-register customer authentication and multi-factor authentication, freeze cards, and monitor for unauthorized transactions.
Don’t send credentials or banking details to the repairer or anyone contacting you. Follow official guidance from your bank, carrier and relevant regulator instead.
Report fraud without waiting for certainty
Check statements and alerts for fraudulent transactions or other unauthorized transactions. If you spot a transfer you didn’t expect, contact your bank immediately and explain what happened. Prompt reporting can help limit losses from bank fraud.
Don’t keep replying to the caller or text sender in the hope of sorting it out. If you suspect someone is targeting your account, preserve relevant messages and follow your bank’s instructions.
Authorised Push Payment scams happen when someone is tricked into sending money themselves. The Payment Systems Regulator’s APP fraud reimbursement protections cover qualifying Faster Payments and CHAPS claims, with rules introduced on 7 October 2024. The standard reimbursement limit is £85,000 per claim, and providers generally have five business days to reimburse, although the detailed rules and exceptions matter.
Common questions about banking apps and repair
Should a phone be factory-reset before repair?
Only reset it after you have a complete backup and have confirmed the repairer’s requirements. A reset does not fix a damaged display cable, charging port or board fault, and it can make diagnosis harder.
For a routine screen, battery or port repair, a backup plus sensible account preparation is often enough. If you choose to erase the device, remove it from Find My only when you are ready and understand the security trade-off.
Will a repair affect Face ID or create a parts warning?
A screen repair should not touch Face ID. If Face ID works before the repair, it should work after it. Test it when the phone returns, alongside touch response, cameras, charging and your banking app login.
If an iPhone has no Parts and Service History warning before it reaches us, it will not gain one after the repair. If a message already appears, no repairer can remove it.
Keep repair access separate from your money
After the phone returns, inspect its casing and screen, then test the passcode, Face ID, Touch ID or Android biometric unlock. Confirm Find My iPhone or Find My Device remains configured, and check touch response, cameras, charging, the SIM or eSIM, and banking-app approvals. These checks confirm the phone’s security features still work.
Change any temporary repair passcode and restore payment cards only once you’re satisfied with the device. Install software updates and security patches through official device settings before normal use. Review account alerts and contact your bank immediately if anything suggests bank fraud or shows an unexpected payment. Keep credentials private, use trusted networks and monitor the account as part of sound cybersecurity practices.
