Threat Level Critical in Phone Theft as Organised Criminal Networks Launder Stolen Crypto on Industrial Scale

London – September 29 2026, 10:00am BST: Global payments infrastructure platform Mercuryo has given warning that the rapid rise of smartphone theft is creating a growing security threat that extends far beyond the loss of a physical device, with criminals increasingly able to exploit compromised phones to obtain access to banking apps, cryptocurrency wallets and personal data before speedily moving stolen funds across international networks.

The convergence of smartphone theft and the penetration of banking and crypto apps creates a potentially powerful pipeline for organised criminals: a stolen device is the initial access point while crypto and traditional payment networks can provide the infrastructure for moving and laundering stolen funds across jurisdictions.

As smartphones become an increasingly important gateway to people’s financial lives, a single stolen device can potentially give criminals access to banking apps, cryptocurrency wallets, email accounts and authentication tools. Once access has been obtained, stolen funds can be transferred rapidly between wallets, blockchain networks and banking apps, creating a complex trail spanning multiple countries.

The City of London Police has published findings showing that more than £7,000 a day was being defrauded from victims following mobile-phone theft during a three-month period, with criminals commonly obtaining access to banking, cryptocurrency and credit card and personal loan apps on stolen devices. Separately, the Financial Times reported that one victim of mobile phone theft lost nearly £40,000 in crypto after his iPhone was stolen.

Furthermore, the financial crime ecosystem behind stolen devices is already operating at a global scale. INTERPOL supported more than 1,500 transnational fraud investigations involving $1.1 billion in lost assets since 2024, while Europol recently identified a cryptocurrency laundering service suspected of processing more than €336 million in illicit funds between 2022 and 2025.

Police and law enforcement agencies are increasingly recognising the importance of rapid crypto tracing services. Blockchain analytics firm Elliptic has launched an AI-assisted tool designed to allow police officers to analyse cryptocurrency wallet addresses and transaction hashes in seconds, without requiring specialist blockchain expertise. The development reflects the increasing need for investigators to identify and understand cryptocurrency transactions as part of wider financial-crime investigations.

Mercuryo's Anti-Fraud and Transaction Monitoring teams investigate reports of potentially fraudulent activity by tracing where stolen cryptocurrency moves after a crime is reported. Mercuryo takes action to block related wallets or transactions while investigations can also help identify connections between seemingly separate cases and uncover wider fraud schemes. The intelligence gathered through these investigations is subsequently used to identify recurring patterns and strengthen Mercuryo's anti-fraud procedures and preventive controls.

“While having your mobile device stolen in itself is something you hope will never ever happen, the consequences afterwards can be life changing” said Ashna Vaghela, Chief Customer Officer at Mercuryo. “A nexus has emerged between low-level phone thieves and sophisticated criminal organisations with specialists that can penetrate crypto and banking apps. Stolen funds are quickly moved and laundered across global jurisdictions.”

The criminal journey can begin with a relatively unsophisticated crime. A phone is stolen from its owner, potentially while it is unlocked or while authentication credentials are accessible. The subsequent stages can involve considerably more sophisticated actors. Criminals may attempt to:

• Gain access to banking and cryptocurrency apps
• Take control of email or authentication accounts
• Reset passwords or security credentials
• Transfer cryptocurrency to wallets controlled by criminals
• Move stolen assets between different blockchain networks
• Use multiple wallets and services to complicate efforts to trace the funds
• Attempt to convert stolen cryptocurrency back into fiat currency

While the speed of cryptocurrency transactions can create challenges for victims and investigators, blockchain transactions can also provide a valuable source of evidence. Mercuryo uses Chainalysis, a specialist blockchain analytics firm, to investigate the movement of cryptocurrency and identify potential connections between wallets and broader fraud schemes.

By tracing cryptocurrency movements, Mercuryo’s teams can investigate where funds are moving and identify potentially related cases. This can help build a broader picture of criminal activity rather than treating every incident in isolation. Where possible, Mercuryo can take action to block related wallets or transactions on its side. The findings from these investigations can then be used to identify common patterns and improve Anti-Fraud rules and preventive controls.

“When a victim reports stolen cryptocurrency, the investigation does not necessarily stop with the original transaction,” said Ms Vaghela. “We trace where the funds go and, where possible, take action to block related wallets or transactions. Importantly, that investigation can also help us identify connections between different cases and uncover wider schemes. We use those findings to improve our fraud-prevention controls.”

The speed at which cryptocurrency can be transferred means that stolen funds can sometimes move rapidly after an account is compromised. The speed of digital transactions can create a time-sensitive window in which businesses, victims and authorities need to identify suspicious activity and share information in real time. Mercuryo works with law enforcement when it receives an official request and provides the necessary information in accordance with applicable requirements. This makes early detection, internal investigations and rapid information sharing important components of an effective response.

“In some cases, criminals can move funds very quickly, particularly when cryptocurrency is involved, while investigations and formal information-sharing processes can take more time,” said Ms Vaghela. “That is why early detection and rapid internal investigation are so important. When we receive official requests from law enforcement, we work with them and provide the necessary information.”

The international nature of cryptocurrency transactions can also introduce additional complexity. A victim, the stolen device, the cryptocurrency wallets receiving stolen funds and the financial or crypto services subsequently used to move those assets may all be located in different jurisdictions. The ability to take further action depends on the legislation of the countries involved and the rules governing the relevant financial and payment systems.

Even where stolen funds have been successfully traced, recovering them may require cooperation between multiple jurisdictions and authorities. For businesses operating across borders, compliance with applicable legal and regulatory requirements and effective cooperation with relevant authorities are critical components of financial crime prevention.

“Tracing funds is only one part of the process,” said Ms Vaghela. “What happens next can depend on the legislation in the relevant countries and the financial and payment systems involved. Recovering assets can require cooperation between multiple jurisdictions and authorities, which is why international information sharing and strong compliance frameworks are so important.”

Consumers should treat the theft of a smartphone as a potential financial-security incident rather than simply the loss of a physical device. Mercuryo recommends that victims:

1. Remotely lock the phone using Find My (iPhone) or Find My Device (Android), and erase it if it's unlikely to be recovered.
2. Report the theft to local law enforcement and retain the crime reference or report number.
3. Contact their mobile operator to block the SIM card and financial institutions immediately and report that the device may have been compromised.
4. Secure important accounts, including email, banking, cryptocurrency and authentication services by changing passwords and enabling two-factor authentication, using another trusted device where possible.
5. Review financial and crypto accounts for unauthorised activity and report suspicious transactions immediately to the provider.
6. Preserve evidence, including transaction records, account alerts, suspicious messages, wallet addresses and other relevant information.
7. Contact crypto platforms and other relevant service providers quickly if unauthorised transactions have occurred.
8. Continue monitoring accounts for subsequent attempts to access or compromise other services.

The growing convergence between physical theft, digital identity compromise and cryptocurrency demonstrates why financial crime prevention can no longer be treated as a problem belonging to one sector alone. As criminals move between the physical and digital worlds, crypto companies, financial institutions, payment providers, technology companies and law enforcement all have a role to play in identifying suspicious activity and disrupting the movement of stolen funds.

“The important thing is to connect the dots,” added MsVaghela. “A stolen phone, a compromised account and a crypto transaction can represent different stages of the same criminal operation. The more quickly those connections can be identified, the greater the opportunity to disrupt the movement of stolen funds and use what we learn to prevent similar attacks.”

Mercuryo is a leading payment infrastructure platform in the digital token space. Standing out in the decentralized ecosystem by enhancing payment use case growth and on-chain integration, Mercuryo’s intuitive and robust solutions are powering the next generation of Web3 payment services. Mercuryo’s innovative payment products such as Spend bridge the gap between TradFi, Web2 and Web3. Mercuryo is the proud partner of leading pillars in the digital token economy such as Trust Wallet and MetaMask, along with Revolut, Mastercard and Visa. Driven by an evolving product suite, Mercuryo is expanding further and continuing to innovate with a diversified stack of payment services.

Learn more at: https://mercuryo.io/

Joe Morgan, PR Manager, Mercuryo

j.morgan@mercuryo.io