Why Did My Samsung Phone Factory-Reset Itself and Erase Everything?

The timing around opening an unknown item is worth taking seriously, but ordinary apps usually cannot erase a modern phone without elevated permissions or account access. Don’t reinstall suspicious apps yet. Secure your accounts first, check for unfamiliar devices or password changes, and contact Samsung support or your carrier with the phone’s model and serial information.

Check Google Photos, Google Drive, Samsung Cloud, OneDrive, and any other backup service you had enabled. A factory reset removes local files, but synced copies may still be available after you sign back in. Also review your account security from another trusted device, because an unexpected wipe can indicate that someone else had access.

Was the phone purchased second-hand? If so, the previous owner may still have had it linked to a device-finding service and remotely wiped it. That possibility is especially worth checking if the phone suddenly returned to the welcome screen without you entering recovery mode or confirming a reset.

This sounds like a remote factory reset rather than a normal restart. Someone who could access the Google or device-management account linked to the phone may have triggered an erase through a web browser. Change your Google and Samsung account passwords immediately, enable two-factor authentication, and review logged-in devices and recent security activity. If the phone was used or bought from someone else, contact the seller and verify that it wasn’t reported lost or stolen.