Technologies

Is It Really Safe to Buy an Old or Used Phone? Here’s What You Need to Know

It might not be safe to use an older or used phone. Here’s how you can be sure and how to protect yourself.

The best phones you can buy right now all come with top specs, a plethora of features and pro-level camera systems. But these flagship handsets, like the iPhone 16 Pro and Samsung Galaxy S25 Ultra, also demand a lot of cash if you want to slide them into your pocket. It’s no surprise that many of us look toward more affordable options instead of opting for the latest model. You can save a bundle by looking toward used or older devices. After all, older hardware is usually fully capable of handling what you need it to, and it’s more environmentally friendly to keep using phones for longer, rather than sending them to landfill.

But while these old smartphones might be cheaper, they may not be safe to use, especially if you bought a used phone that’s more than a few years old. The problem is that older phones might run outdated versions of Android or iOS, which means they often don’t have critical security updates that can keep you and your data safe.

If you’re concerned about security and privacy — and you should be — here are some things to consider.

Read more: Make Your Phone Last for Years With These Easy Tips

What is a security patch for a phone OS?

Hackers are constantly looking for cracks and holes in your phone’s software to exploit. Whenever hackers discover a new hole, phone-makers usually get it fixed, and that fix is sent out to your phone to make sure that nobody can take advantage of it. That’s a security patch. You’ll likely have received plenty of them over time as cybercriminals are always trying to find new ways to circumvent the security on your phone.

It’s a continual game of cat and mouse, with hackers finding holes and software providers patching them up. And on the cycle goes. Most of the time, you’ll never know about it, but it’s the thing that’s keeping your phone up to date and protected against known threats.

Why do manufacturers stop sending out security patches?

All manufacturers including Samsung, Sony, Google and OnePlus only provide support to a phone for so long. Each new handset that’s released and each new version of Android requires new threat assessment and patching. That’s a lot of work, and it means that finding and patching those holes for every single handset spanning years and years just becomes unfeasible.

As a result, Google and the phone-makers eventually have to cut off support for older handsets. Those handsets then will no longer receive security updates, meaning that when a threat is detected on that phone, it simply won’t be fixed.

So is using an out-of-date phone safe?

As Christoph Hebeisen, director of the security intelligence company Lookout, explained, “We do not consider it safe to run a device that does not receive security patches. Critical security vulnerabilities become public knowledge every few weeks, or months, and once a system is out of support, then users who continue to run it become susceptible to exploitation of known vulnerabilities.”

According to Hebeisen, a vulnerable phone could allow full access to everything that’s on your phone, including your personal and company emails, contact information, your banking details or audio of your phone calls. A hacker could continue to have access to this information for as long as you continue using the compromised handset.

How do I know if my phone is too old?

Finding out if your phone is still supported and receiving security patches often isn’t straightforward. To start, go into Settings and check your software updates. Install the latest version that’s available. Usually it’ll give you some indication of when the phone was last updated. If your phone says it has the latest OS software, but that latest version was installed many months or even years ago, it’s bad news. Your phone is probably no longer supported.

Sadly, manufacturers don’t give you a warning that tells you when they’ve dropped support for a phone, so you either find out through a rude awakening like I mentioned above, or figure it out yourself through some other means.

Previously it was common that phones may only be supported for a few years, but thankfully most companies — including Google and Samsung — have upped their game, offering support for at least seven years on their recent generations of phone. Google’s latest Pixel 9 and 9 Pro will still be safe to use into 2031, while Apple’s iPhone XR, released six years ago, is still compatible with the latest version of iOS. Companies such as Fairphone take that even further, promising at least eight years of support, while even budget phones like the Nothing CMF Phone 2 Pro come with six years of support.

But longer support periods have been something of a recent trend so if you’re buying an older-generation phone on the used market, it’s possible its support period may be shorter, and may even be out of support already.

Finding out if your Android phone is supported will involve some digging. Samsung sent me its list after I contacted its PR team, and it’s available online here, and while it makes it clear which phones are currently supported with updates, it doesn’t say for how long those updates will continue. Google has a page that clearly tells you when your Pixel or Nexus phone will lose security support. (Spoiler alert: All Nexus and Pixel phones up to and including 2021’s Pixel 5A are all out of their official support periods.)

Your best place to start is with the support pages on your phone manufacturer’s website. You might not notice immediately if your phone is out of date. The most obvious sign you’re on old software might be when you look for new apps to download. Many apps will simply be incompatible due to the software and hardware limitations on your phone and you won’t be able to install them.

How can I tell if my phone has been hacked?

Whether you’d ever notice if your phone’s security was compromised is difficult to say. Cybercriminals don’t exactly make it known they’ve accessed your device, so you’ll need to look for signs. Popups that might appear on the phone are a big giveaway, as are any apps that suddenly appear that you didn’t download.

Also watch out for unexplained high data usage, as it could be that malicious apps are using a lot of data in the background. Other indicators can also include unusually high battery usage and sluggish performance, but both of these can also be attributed to using older hardware that degrades over time.

Read more: Best Android VPNs

How can I keep myself safe if I have an old phone?

As Hebeisen says, the best way to keep yourself safe is simply to not use a phone that’s no longer supported. If you’re short on money, can’t afford to upgrade just yet or you’re using an older phone temporarily for whatever reason, there are a couple of things you can do that could help.

First, you should make sure the phone has the latest software installed. If you bought it used, make sure to fully factory-reset the phone. Ensure that you only download apps from the Google Play Store (rather than from third-party or unofficial app stores) and certainly avoid installing apps by downloading the APK file from a website. This can often be a way that malicious software weasels its way into a phone.

You can help protect your personal information by simply not giving too much away in the first place. Don’t do any banking on the phone, don’t sync your company email accounts and don’t send sexy pictures or have sexy video chats until you’re back on a protected device. (Even over a phone, it’s important to practice safe sex.)

According to Hebeisen, if you don’t take such precautions, “this might enable an attacker to observe and manipulate almost everything happening on the device.” That’s a cold shower, right there.

Technologies

Microsoft’s Nadella says AI needs an ‘emergency brake’ that humans control

Nadella joined other tech moguls and researchers in calling for stronger safeguards and, in some cases, for the pacing of frontier development.

Your Privacy

On this service, we and our vendors use cookies and other tools (“Cookies”) to store and access information on your device, such as device identifiers, IP address, and your browser type.

Your data may be used to save and communicate your privacy choices; ensure security, prevent fraud, and debug our products and services; personalize advertising and content; for advertising and content measurement; to conduct audience research and services development; so we can improve our services and develop new ones; to match and combine offline data with your online activity; and for social features.

We may share this data with select vendors with your consent. You can adjust your choices any time through the “Cookie Preferences” link in the footer of relevant Versant sites or in-app settings.

We will also use other Cookies that are essential or related to our services, including for security and fraud prevention. To learn more about some of our vendors, see the IAB and Google Vendors under each purpose. Visit our Cookie Notice and Privacy Policy to learn more.

These Cookies and SDKs are required for Service functionality, including security and fraud prevention, and to enable any purchasing capabilities. You can set your browser to block these tracking technologies, but some parts of the site may not function properly.

The choices you make regarding the purposes and entities listed in this notice are saved and made available to those entities in the form of digital signals (such as a string of characters). This is necessary in order to enable both this service and those entities to respect such choices.

Your data can be used to monitor for and prevent unusual and possibly fraudulent activity (for example, regarding advertising, ad clicks by bots), and ensure systems and processes work properly and securely. It can also be used to correct any problems you, the publisher or the advertiser may encounter in the delivery of content and ads and in your interaction with them.

Certain information (like an IP address or device capabilities) is used to ensure the technical compatibility of the content or advertising, and to facilitate the transmission of the content or ad to your device.

Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.

– Use limited data to select advertising 796 partners can use this purpose Advertising presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).

– Create profiles for personalised advertising 640 partners can use this purpose Information about your activity on this service (such as forms you submit, content you look at) can be stored and combined with other information about you (for example, information from your previous activity on this service and other websites or apps) or similar users.

This is then used to build or improve a profile about you (that might include possible interests and personal aspects). Your profile can be used (also later) to present advertising that appears more relevant based on your possible interests by this and other entities.

– Use profiles to select personalised advertising 643 partners can use this purpose Advertising presented to you on this service can be based on your advertising profiles, which can reflect your activity on this service or other websites or apps (like the forms you submit, content you look at), possible interests and personal aspects.

– Create profiles to personalise content 265 partners can use this purpose Information about your activity on this service (for instance, forms you submit, non-advertising content you look at) can be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users.

This is then used to build or improve a profile about you (which might for example include possible interests and personal aspects). Your profile can be used (also later) to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests.

– Use profiles to select personalised content 238 partners can use this purpose Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services (for instance, the forms you submit, content you look at), possible interests and personal aspects.

This can for example be used to adapt the order in which content is shown to you, so that it is even easier for you to find (non-advertising) content that matches your interests.

– Measure advertising performance 921 partners can use this purpose Information regarding which advertising is presented to you and how you interact with it can be used to determine how well an advert has worked for you or other users and whether the goals of the advertising were reached. For instance, whether you saw an ad, whether you clicked on it, whether it led you to buy a product or visit a website, etc.

This is very helpful to understand the relevance of advertising campaigns.

– Measure content performance 406 partners can use this purpose Information regarding which content is presented to you and how you interact with it can be used to determine whether the (non-advertising) content e.g. reached its intended audience and matched your interests.

For instance, whether you read an article, watch a video, listen to a podcast or look at a product description, how long you spent on this service and the web pages you visit etc. This is very helpful to understand the relevance of (non-advertising) content that is shown to you.

– Understand audiences through statistics or combinations of data from different sources 583 partners can use this purpose Reports can be generated based on the combination of data sets (like user profiles, statistics, market research, analytics data) regarding your interactions and those of other users with advertising or (non-advertising) content to identify common characteristics (for instance, to determine which

target audiences are more receptive to an ad campaign or to certain contents).

– Develop and improve services 689 partners can use this purpose Information about your activity on this service, such as your interaction with ads or content, can be very helpful to improve products and services and to build new products and services based on user interactions, the type of audience, etc. This specific purpose does not include the development or improvement of user profiles and identifiers.

– Use limited data to select content 181 partners can use this purpose Content presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type, or which content you are (or have been) interacting with (for example, to limit the number of times a video or an article is presented to you).

These Cookies and SDKs are used to collect data about your browsing habits, use of the Services, your preferences, and your interaction with advertisements across platforms and devices for the purpose of delivering targeted advertising content, both on our Services and on third party sites.

Third-party sites and services also use Targeting Cookies to deliver content, including advertisements relevant to your interests on the Services. If you reject these Cookies or SDKs, you will see less relevant advertising.

Data collected under this category through Cookies and SDKs can also be used to select and deliver personalized content, such as news articles and videos.

Technologies

Kremlin Confirms Putin Transmitted Iran’s War Resolution Plan to Trump

The Kremlin says Putin relayed Iran’s proposal for ending the war to Trump, while Trump announced a Russian diesel supply deal that drew sharp criticism from Zelenskyy.

Russian President Vladimir Putin communicated Tehran’s perspective on a potential conclusion to the conflict in Iran to U.S. President Donald Trump, according to Russian state media reports on Saturday.

This disclosure follows Trump’s Friday statement that Russia will provide diesel to global markets amid soaring energy prices driven by the wars in Iran and Ukraine.

Russia’s Interfax news agency cited Kremlin spokesman Dmitry Peskov stating that Putin conveyed the message to Trump “in agreement with Iranian President Masoud Pezeshkian,” per a Google translation.

Additional Russian media accounts indicate Putin spoke with Trump by phone after meeting Pezeshkian on the margins of a summit in Turkmenistan.

Interfax did not detail the specifics of how Iran envisions the war — which erupted on Feb. 28 with U.S. and Israeli airstrikes on Iranian targets — reaching an end.

The White House did not immediately respond to Verum’s emailed request to confirm the reported conversation between Putin and Trump.

Russia supply deal

Trump announced Friday that Russia will deliver more than 4 million tons of diesel to the global market under an arrangement he said he agreed with Putin during a phone call.

Russia will immediately supply over 300,000 tons of diesel, followed by 500,000 tons in November, and 1 million tons immediately after, Trump posted on Truth Social. Moscow will then provide another 3 million tons of diesel contingent on the condition of Russia’s refineries, Trump added.

The Treasury Department temporarily waived sanctions on Russian diesel through April 2027 under a general license issued Friday.

Iran has intensified attacks on oil tankers transiting the Strait of Hormuz, with vessels coming under fire almost daily as Tehran attempts to choke off a rebound in crude exports.

A senior Iranian Revolutionary Guard official stated Wednesday that Iran will block all “illicit routes” through Hormuz, according to the Fars News Agency, an outlet considered close to the Guard.

The surge in tanker attacks coincides with crude oil exports from the Middle East rebounding in September to prewar levels, largely because the U.S. military escorted ships through Hormuz along Oman’s coast.

An interim agreement signed in June between the U.S. and Iran to pause hostilities to allow for negotiations quickly collapsed.

‘Gifts to Putin’

Ukrainian President Volodymyr Zelenskyy immediately denounced Trump’s diesel deal with Putin. Ukraine’s leader warned that easing sanctions without a commitment from Russia to de-escalate the war will only prolong it.

“Gifts to Putin will not bring peace or any benefit to the civilized world,” Zelenskyy said in a social media post. “Russia will ‘repay’ the diesel with further terror and perfidy. Allowing Russia to sell petroleum products is an investment in a war that must be ended, not prolonged.”

Diesel prices have surged worldwide as Ukraine has pounded Russian refineries, forcing Moscow to ban diesel exports to global markets. Iran and its Houthi allies have also attacked refineries in the Middle East, further constraining fuel supplies.

Trump faces mounting political pressure to lower fuel prices ahead of the November midterm elections. Republicans confront competitive races in conservative strongholds like Iowa, where farmers feel the pinch of high diesel prices.

Technologies

AI is Changing How Lawyers Work — and Putting the Billable Hour Under Pressure

AI is reshaping the legal industry by reducing the time needed for routine tasks, challenging the traditional billable hour model, and changing how lawyers learn and practice.

Artificial intelligence is now used by almost 90% of legal professionals in the U.K. and Ireland, and it’s putting one of the profession’s oldest conventions — the billable hour — under the microscope. That’s according to legal software company Clio’s U.K. & Ireland Legal Insights Report 2026.

It found that among firms using AI, almost 80% said they can handle more work without increasing resources, while over 70% said it cut costs by absorbing administrative work once done by support staff.

As a result, AI is challenging some of the assumptions on which the legal profession was built, forcing firms to reevaluate how their lawyers spend their time, how they charge for it and how new lawyers learn the ropes. You can’t charge 16 hours for something that takes 16 secondsNick Rowles-DaviesLexolent Some of the U.K.’s biggest firms are already putting this into practice.

A&O Shearman has worked with legal AI company Harvey to develop artificial intelligence agents for tasks, including reviewing loan agreements and analyzing regulatory filings, which it says can complete in minutes work that previously took several hours. Slaughter and May, meanwhile, has rolled out Harvey across all practice areas this year, including for regulatory research and document analysis.

Billable hour pressure The billable hour is central to the business model of many law firms, but when AI significantly reduces the time lawyers spend sifting through and drafting documents, the economics are no longer so straightforward. “You can’t charge 16 hours for something that takes 16 seconds,” Nick Rowles-Davies, founder and CEO of legal finance fund Lexolent, based in London and Dubai, told CNBC.

About one in five firms that have widely adopted AI report difficulty meeting billable-hour targets, according to Clio’s report. Globally, senior legal leaders expect the share of work charged by the hour to fall from 72% to 44% over the next two to three years, according to a Deloitte survey.

Routine work is the most exposed, Rowles-Davies said. “If you’ve got standard documents and you’re just putting in detail, then clearly that’s an automatic process.” But complex legal work still requires human judgment, he added, particularly when interpreting AI output and determining the right strategy for a client.

Lawyers [are] telling us that their day is getting betterJoshua LenonClio

AI and workloads

Whether AI efficiencies ultimately make lawyers’ working lives better may depend on what firms do with the time they get back. Clio’s report found that 51% of legal professionals work evenings, but only 32% want to, while 22% work weekends compared with 11% who would choose to.

Joshua Lenon, Clio’s New York-based lawyer-in-residence, believes some lawyers are already seeing the benefits. “Lawyers [are] telling us that their day is getting better,” Lenon told CNBC, as AI becomes more commonplace.

“People are really looking at these tools and saying, ‘This is making work better.’”