Account Recovery When You No Longer Have the Phone Number

Why the Number Cannot Be Recovered

A temp number is an activation on a real mobile-range line that belongs to the carrier and is leased to TempNumber.me for the pool. When the activation or rental ends, the number sits in quarantine for a period and is then offered to another customer, possibly for a different platform. TempNumber.me cannot reassign a specific past number to you on request, and cannot read messages sent to it after your activation closed, because there is no inbox for you to read; the number is somebody else's or nobody's. The lifecycle is described at /blog/how-long-do-temp-numbers-last.

On the platform side, SMS recovery is built on the assumption that whoever holds the number is the account owner. That is the same assumption that makes a shared public inbox number dangerous, since anyone watching it can take an account attached to it, and it is the reason platforms do not offer a "the number expired, use something else" path: from their side, that request is indistinguishable from an attacker. Recovery therefore depends entirely on what else was on the account before the number went away.

Google

Google has the most developed recovery flow and the best odds if anything else was set. Start at accounts.google.com/signin/recovery from a device and network the account has used before, since Google weighs that heavily. If a recovery email is on file, a code goes there and the account is back in minutes. If not, Google offers a sequence of questions: the last password you remember, the account creation month, a code sent to any signed-in device such as an Android phone or a Gmail app session, and finally an "it may take a few days" review that emails a decision to an address you supply.

Backup codes generated under Security, then 2-Step Verification, work even after the phone is gone, and a signed-in Chrome or Android session counts as a trusted device that can approve the login. What Google will not do is accept ID documents for a consumer account or let support override the flow. An account that had only an expired temp number and nothing else, accessed from a fresh device, is a near-certain loss. The setup that avoids this is at /blog/temp-number-for-google-account.

Microsoft

Microsoft accounts (Outlook, Xbox, OneDrive) have two recovery routes. If any other security info is on file, an alternate email or an authenticator app, the sign-in page offers it. If none is, the account recovery form at account.live.com/acsr asks for details only the owner would know: subjects of recent emails, contacts you have written to, Xbox gamertag, Skype contacts, previous passwords, and billing details from any Microsoft purchase. Fill it from a device and location the account has used, and be specific; the form is scored automatically and a vague submission fails.

The form allows repeat attempts, and Microsoft says it can take up to 24 hours per attempt. Accounts with Microsoft 365 subscriptions or Xbox purchase history do better because billing data is strong evidence. Work and school accounts managed by an organisation are not covered by this form at all; the organisation's administrator resets them.

Instagram and Facebook

Meta recovery is the weakest of the group. Instagram's "get help logging in" flow sends a link to the email or phone on file and, if neither is reachable, offers a video selfie for accounts that have photos of the account owner's face. That selfie route works only for personal accounts with face photos already posted; brand, business, and pseudonymous accounts have nothing to match against and are typically refused. The support form for hacked accounts asks for the email or phone originally used, which sends you in a circle if both are gone.

Facebook offers trusted contacts, since renamed and partly withdrawn, and an ID upload for accounts that used a real name matching the ID. Backup codes generated under Password and Security work for both apps if you saved them. Without a recovery email, backup codes, or a face-match selfie, an Instagram or Facebook account on an expired number is lost, and the practical advice is to create a new one and set the recovery email in the first session.

Telegram and WhatsApp

Both are number-based, and both are harder than the others because the number is the identity rather than one credential among several. Telegram logs in by SMS or by a code sent to an existing signed-in session. If you still have Telegram open on any device, go to Settings, then Devices, and that session can approve a new login and can change the account number to one you control. With no live session and no access to the number, Telegram support cannot help; the account remains attached to the number, and the next holder of that number who logs in gets a fresh Telegram identity on it, not your chats, because Telegram deletes the old account after a period of inactivity that you can set as short as one month.

WhatsApp is similar. Registration goes to the number, and a two-step verification PIN, if set, is required on top of the SMS code. The PIN protects against someone else registering the number, but it does not let you register without the number. Chat history lives in your device backup, Google Drive or iCloud, and that backup can be restored onto a new number in the same app, though contacts see it as a new account. If the number is gone and you want the account back, there is no path; migrate the backup to a number you control instead. Details on WhatsApp number choice are at /blog/how-to-get-temp-number-for-whatsapp.

Binance and Other Exchanges

Exchanges are the one category where losing the phone is survivable without a recovery email, because they are obliged to know who you are. Binance offers a security reset: you request it from the login screen, upload the government ID used at KYC, record a short video following on-screen instructions, and wait for review, which takes from a few hours to several days. The reset removes SMS and authenticator factors, imposes a 24-hour withdrawal hold, and lets you set new ones. Coinbase, Kraken, and Bybit run comparable flows.

The condition is that the account completed identity verification under a real name and document. An exchange account that never reached KYC, or that used a number and identity that do not belong to you, cannot be reset, and the exchange will lock the account rather than return funds if the reset request looks inconsistent. This is why a temp number is the wrong tool for exchanges from the start.

Prevention: The First-Session Setup

Every path above is easier or possible only because something other than the phone was on the account. The following takes two minutes on any platform and removes the temp number from the recovery chain entirely.

• Add a recovery email you control before you leave the signup session. Confirm it, since an unconfirmed recovery email is ignored by most platforms.
• Turn on two-factor authentication with an authenticator app (Google Authenticator, Authy, Aegis, 1Password) rather than SMS. The temp number was for the one-time gate; it is not a long-term second factor. How to set that up without a phone number is at /blog/two-factor-authentication-without-phone.
• Generate and save backup codes on any platform that offers them: Google, Microsoft, Instagram, Facebook, Discord, Binance. Store them in a password manager.
• Stay logged in on at least one device. A live session on Telegram, Google, or Microsoft is a recovery channel in itself.
• For accounts that will keep texting the number, such as payments apps and exchanges, do not use a single activation; use a rental and change the number on the account before the rental ends.
• Write down which number verified which account, with the date. When a platform later asks "the number ending in 47", you will know what it is referring to even though you no longer hold it.

When Support Can and Cannot Help

TempNumber.me support at support@tempnumber.me can confirm activation history on your account, which is occasionally useful as evidence in a platform's recovery form, and handles credit questions on activations where no code arrived on a case-by-case basis. It cannot re-lease a specific expired number or read messages to a number after the activation closed.

Platform support can help when there is a second channel or an identity file to check against, and cannot when the expired number was everything. The wider troubleshooting for codes that do not arrive while a number is still live, which is a different and fixable problem, is at /blog/sms-not-arriving-troubleshooting and /blog/why-sms-codes-expire.