What happens to keys, tickets and IDs when a phone is lost?

What protects you first

The lock screen. A phone that will not present anything until it has checked who is holding it is the reason a lost phone is not a lost wallet, which the phone payment page sets out as the structural difference from plastic.

The exception is deliberate and worth knowing: credentials allowed to answer without verification, the express arrangements the transit page describes, will answer to whoever holds the phone. That is a fare, by design, and it is the part of a wallet a finder can actually use.

Everything else waits for a check the finder cannot pass, which is why the panic people feel is usually larger than the exposure.

Revoking, issuer by issuer

There is no single switch, because there was never a single issuer. Payment credentials are suspended through the bank or the platform's own device management, which the stolen phone page covers in the order that matters.

A transit pass is suspended by the operator, and a stored balance is the case where speed is worth something.

A car key is revoked in the vehicle's system, a building or hotel key by whoever administers the doors, and an identity attestation by the wallet provider or the attestation provider, with the regulation's own erasure rights behind it.

Marking the device as lost, where the platform offers it, is the fastest single action because it addresses the credentials the platform holds. It does not reach the ones it never issued.

The reader that never asks

A revocation is an instruction that has to arrive somewhere. An online terminal asks before it accepts and stops immediately; an offline reader decides alone and keeps accepting until it is told.

That is the same mechanism the offline validator page describes for buses and the hotel key page describes for a door: batteries, a clock, no connection, and whatever it last learned.

So the honest answer to whether a revoked key still opens a door is that it depends on the door, and that the gap is measured in however long it takes an update to reach it. For a home lock that may be until somebody opens an application next to it.

Which is a reason to know which of your credentials live behind offline readers before you need to know.

What to do, in order

Mark the device lost with the platform, which locks it and addresses the credentials the platform holds.

Then the issuers with money or access behind them: the bank, the transit operator with a balance, the vehicle, the building. A call to the people who administer a door beats any application here, because that is the system that has to push a change outwards.

Then the slow ones: identity attestations, loyalty accounts, anything enrolled from a document, which have to be enrolled again on the replacement and which nobody else can use without passing the checks the wallet asks for.

And keep the list you made when you changed phone, because the hardest part of losing a wallet is remembering what was in it.