Avoiding stolen phones: IMEI and blacklist checks for buyback merchants
The fastest way to sink a new buyback business is to buy a stolen phone. You pay real money for it, you may be legally required to surrender it with no compensation once it is flagged, and you carry the reputational damage of being the shop that fenced stolen goods. The good news: the tools to avoid this are simple, cheap, and mostly a matter of discipline. This guide covers what buyback merchants need to know about IMEIs, blacklist checks, and recording acquisitions. It is general information, not legal advice — check the rules where you operate.
IMEI basics
Every phone has an IMEI — International Mobile Equipment Identity — a 14-to-16-digit number that uniquely identifies the physical device on cellular networks. Unlike a SIM or a phone number, the IMEI is tied to the hardware itself, which is exactly why it is the anchor for anti-theft systems.
For a buyback merchant, the IMEI is the single most important piece of data you capture at intake. It lets you:
- Check the device against blacklists of lost and stolen phones.
- Record a durable identifier for your dealer log and holding-period reporting.
- Prove which physical device you acquired, from whom, and when.
How to find the IMEI
There are three reliable ways to read a device’s IMEI, and you should know all three because sellers show up with devices in every state:
- Dial
*#06#. Typing this code into the phone dialer displays the IMEI on screen instantly. It works even on a locked device that can still make emergency-style dialer entries, and it is the fastest method for a working phone. - Check the SIM tray or back of the device. Many phones have the IMEI etched on the SIM tray or printed on the rear housing.
- Read the box. The retail box usually carries the IMEI on its label.
For a phone that will not power on, the tray and box are your fallbacks.
Blacklist checks
A device gets blacklisted when it is reported lost or stolen (or, sometimes, has unpaid financing). Carriers and industry databases share these reports so a blacklisted device can be blocked from networks. A phone can look and work perfectly and still be blacklisted — which is precisely why you check before you pay, not after.
Build the check into your intake as a hard gate: no clean blacklist result, no payment. Alongside the blacklist status, confirm the device is not locked to the previous owner’s account (activation lock), because a device you cannot fully reset is not resellable regardless of its blacklist status.
Why you must record every IMEI
Recording IMEIs is not just prudent — in many jurisdictions it is required. Secondhand-goods and pawnbroker-style regulations frequently oblige dealers to log the device identifier, the seller’s government ID, and the date of each acquisition, and to hold the device for a period before resale so law enforcement can flag stolen property.
Even where it is not strictly required, a complete IMEI log protects you:
- It is your defense. If a device you bought turns out to be stolen, a clean record showing you checked the blacklist and logged the seller’s ID demonstrates good faith.
- It supports dealer reporting. Jurisdictions that require reporting acquisitions to police or a third-party service need the IMEI as the key field.
- It builds trust. A documented, by-the-book process is what makes honest sellers choose your shop.
Treat the dealer log and holding period as core parts of your operation, covered further in our guide to how to start a phone buyback business.
How the platform handles IMEIs
The buyback platform is built to make IMEI capture fast and hard to skip:
- A dedicated IMEI field. Read the number via
*#06#, the SIM tray, or the box, and type it into the IMEI field on the order. It is a plain text field — no OCR, no photo scanning — so double-check the digits against the source before you save. - Stored IMEI on the order. The entered IMEI is stored against the order, so every acquisition carries its device identifier through inspection, payment, and resale — feeding your dealer log directly.
- A pluggable blacklist-check hook. The platform exposes a blacklist-check step in the acquisition flow as an integration hook. In the current version this is a hook you connect a checking source to — it does not ship with a bundled paid blacklist provider. That means you keep the anti-theft gate in your workflow and wire in the checking service that fits your market and jurisdiction.
Being straight about that last point matters: the value the platform provides today is the workflow — capturing the IMEI reliably, storing it, and giving you a defined place in the flow to run a blacklist check — not a built-in commercial blacklist lookup. See features for the full list.
Why IMEI accuracy matters
A 15-digit number is easy to transpose, a seller in a hurry rushes the read, and a single wrong digit means your blacklist check ran against a device you never actually held — and your dealer log names the wrong hardware. When a device later turns out to be flagged, a log full of typos is worse than no log at all, because it looks like you checked when you effectively did not.
Since the IMEI is entered by hand, build a habit that catches errors: read the number straight from the *#06# screen rather than from memory, type it into the order’s IMEI field while the device is still in front of you, and read it back against the source once before saving. On many devices *#06# shows the IMEI as a scannable barcode as well as digits, so you can compare against the tray or box if a digit looks ambiguous. That deliberate read-back is the cheap step that separates a defensible record from a liability.
Building the check into a busy counter
The anti-theft gate only works if it is fast enough that staff never route around it. Two habits keep it frictionless. First, capture the IMEI as the first step of intake, before grading or price negotiation — read the *#06# screen and type the IMEI into the order while the seller is still handing over the device, so the number is on the order before anyone talks money. Second, treat the blacklist result and activation-lock status as a single go/no-go decision that gates payment: if either is not clear, the acquisition stops there. Making verification the opening move rather than a final formality means it never feels like an obstacle to closing, and it means you never negotiate a price on a device you are about to reject.
A verification checklist
Run this at every acquisition, before money changes hands:
| Step | What to confirm |
|---|---|
| Capture IMEI | Read via *#06#, tray, or box; type it into the order’s IMEI field |
| Blacklist check | No lost/stolen flag from your checking source |
| Activation lock | Device is signed out and can be fully reset |
| Seller ID | Government ID recorded per local rules |
| Holding period | Logged, and device held before resale if required |
Only when every row is clear should the device move on to grading and payment. Grading itself is covered in the device condition grading guide, and how a clean device flows into resale is covered in the WooCommerce trade-in program guide.
Activation lock is not the same as a blacklist
It is worth separating two checks that new operators often conflate. A blacklist flag means a device was reported lost, stolen, or has an unpaid balance, and networks may block it — it is about the device’s status in a shared database. An activation lock is the previous owner’s account still bound to the device, preventing a full reset. A phone can be perfectly clean on the blacklist and still be activation-locked, and vice versa. Both are dealbreakers, but for different reasons: a blacklisted device may be stolen property you cannot legally keep, while an activation-locked device is simply unsellable until it is signed out. Check both, and pay for neither. If a seller cannot sign out of their account in front of you, that is a firm stop — not a problem to be solved after payment.
What clean intake buys you long term
The discipline of capturing, checking, and logging every IMEI compounds. Over months, you accumulate a complete, accurate record of every device you have handled — which supports your holding-period reporting, satisfies dealer-log obligations, and gives you a clean answer the day a device you bought in good faith is flagged. It also shapes your reputation. The sellers who have devices worth buying talk to each other, and the shop known for doing things by the book is the shop they bring their good devices to. The few extra seconds per acquisition are not overhead; they are what keeps stolen goods out of your inventory and honest sellers coming through your door.
Legal considerations (general, not legal advice)
Rules for secondhand electronics vary widely by city, county, and country. Common themes to research for your location:
- Whether you need a secondhand-dealer or pawnbroker license.
- What identity and device records you must keep, and for how long.
- Whether you must report acquisitions to police or a reporting service.
- What holding period applies before resale.
This is a prompt to consult a qualified local advisor, not a substitute for one. A dedicated licensing reference is coming as part of the platform docs.
Get early access
Keeping stolen devices out of your inventory comes down to a disciplined intake: capture the IMEI, check it, and log it — every time, before you pay. The buyback platform makes that the path of least resistance with a dedicated IMEI field, a stored identifier on every order, and a defined blacklist-check step in the flow.
Join the waitlist and we will get you set up to make every acquisition a documented, verified one.