What each bank asks for if you change or lose your phone
This page covers Spain-specific banking apps, for customers with accounts at Spanish banks. Every major bank in Spain ties confirmation of your transactions to a specific phone, not just your password. Each one calls it something different and enforces it differently: here's what we were able to verify for BBVA, Santander, CaixaBank and ING.
Short version: logging into your bank only needs your access password. Confirming transactions (transfers, payments, Bizum) is what really depends on the phone, with its own system at each bank. If you switch phones, you have to set that system up again; if it's stolen, each bank has its own blocking channel.
Why doesn't the bank trust a new phone?
A new phone is, to the bank, a device that has never seen you confirm a transaction. That's why almost all of them separate two things: your access password (to log in and check your accounts) and a second system to confirm transactions, usually tied to the physical device, not just your username. Until you repeat that second step on the new phone, the bank lets you view your accounts but blocks you before you can move money.
Comparison: how each bank links a new phone
| Bank | What it asks to confirm transactions | If you switch phones | If it's stolen |
|---|---|---|---|
| BBVA | Access password + (if turned on) biometric signing instead of SMS | Reactivate biometric signing under Security and privacy > Access/signing methods | BBVA helpline, 900 102 801 |
| Santander | "Secure device" with active electronic signature + SMS code | Register the new phone as a secure device | 900 811 381 (cards, 24h) · 915 123 123 (fraud, 24h) |
| CaixaBank | CaixaBank Sign, active on only one phone at a time | Reactivate signing on the new phone and deactivate it on the old one | 900 40 40 90 or +34 93 887 25 25, 24h |
| ING | Validación Móvil: a own 6-12 character key, tied to the device | Deactivate it in your personal area and activate it again on the new phone | No published hotline; block from the app or client area |
All four share one idea: the system that confirms transactions is built for a device, and moving it to another one requires an explicit step (SMS, reactivation, or both). None of them let you simply "carry on" on the new phone without going through that.
Why does this matter more than "which bank is best"?
Because your bank is often one of the last nodes in your single point of failure: if you've already lost your email or password manager without your phone, chances are you can't confirm an urgent payment either while you sort it out. And the other way round: if your bank requires an SMS to a number you no longer have, or a signature that only lives on the phone you just lost, your money stays out of reach exactly when you need it most — to pay for a flight home or an emergency hotel, for example.
This is exactly the kind of situation that can turn into a circular dependency: if recovering your email needs a code your bank sends by SMS, and getting into your bank needs the signature that only lives in an app you only open with your email, the circle closes and there's no clear way in. It's not the typical case, but it's worth checking before it happens, not after.
What happens to Bizum if I switch phones?
Bizum works inside your bank's app, with your account and your phone number, not with its own separate system you have to set up. What you do need to keep in mind is that, to use Bizum again from a new phone, you first have to complete your bank's process described above (signing, secure device, Sign or Validación Móvil): until that step is done, you won't be able to send or receive money through Bizum from that phone either.
What to check today
- Do you know what system your bank uses to confirm transactions (biometric signing, secure device, Sign, Validación Móvil)?
- Would you know how to register a new phone in that system without having the old phone on hand?
- Do you keep your bank's blocking phone number somewhere outside your phone?
- Do you have a second device you could use to access your bank if you lose your phone?
If it's already happened to you
If your phone is stolen or lost, the first step is always to notify your bank through whatever channel it has (emergency line, the app on another device, or client area) to block cards and, if needed, restrict online banking. The second is calling your carrier to block the SIM. Check your bank's page for the exact number: see BBVA, Santander, CaixaBank and ING.