New technology promises to locate stolen phones even without a SIM card.

A new technology is gaining traction in Brazil with an ambitious promise: to locate stolen mobile phones even after the SIM card has been removed. The news reignites the debate on mobile security and brings important implications for the corporate environment, where the focus goes far beyond hardware and centers on data, access, and compliance.

What the new technology promises

According to recent reports, the advanced tracking system would be able to identify the device’s location even without the original SIM card, using unique device identifiers and integration with networks and databases. The goal is to reduce the illegal mobile phone market and increase the chances of recovering stolen devices.

In practice, this builds on mechanisms that already exist. The IMEI, for example, acts as a “national ID” for the phone: it is a unique number registered with carriers every time the device connects to a network, enabling tracking with judicial support. In addition, native manufacturer features, such as Apple’s “Find My,” Google’s “Find My Device,” and similar Samsung solutions, already allow companies and users to locate, lock, and remotely wipe data in various scenarios.

Why this matters for businesses

In the corporate context, the theft or loss of smartphones represents a risk primarily because of the data and access they carry: corporate emails, ERP applications, authentication tokens, tax documents, and integrations with systems such as SAP S/4HANA. The possibility of tracking devices without a SIM card can strengthen security policies, but it does not eliminate the need for governance over identities, devices, and incident response processes.

Companies that already implement Mobile Device Management (MDM), identity governance, and incident response workflows are more likely to benefit from this technological evolution. The key is having an up‑to‑date device inventory, clear procedures for remote lock and wipe, and integration between security, IT, and legal teams to trigger judicial measures when necessary.

Limits and cautions: what still depends on court orders and integration

It is important to distinguish between technology available to citizens and the capabilities of police and judicial investigations. Tools used by law enforcement, such as the Guardião/Digitro system, cross SIM, tower, and IMEI data based on court orders. For companies, this means asset recovery will often follow formal processes, with support from IT, security, and legal departments.

Moreover, tracking solutions depend on prior configuration and some form of residual connectivity. Even without a SIM card, the device must establish some connection — via Wi‑Fi, Bluetooth, or nearby device networks, to report its location. Corporate accounts (Google Workspace, Microsoft 365, MDM) make it easier to block access, audit logins, and enforce security policies.

Where automation and governance come in (and how Vottax can help)

The central lesson for the corporate world is not just “how to locate the phone,” but “how to reduce the impact of theft or loss” through automation, governance, and compliance. In the fiscal and ERP world, the principles are similar: inventory and transaction traceability, rapid incident response, and system integration reduce windows of vulnerability and operational risk.

If your company already runs SAP S/4HANA and tax automation solutions, the same logic applies: the more integrated and automated the control layer, the lower the risk in crisis scenarios. Vottax can help assess how to automate notifications, review access, and strengthen data governance and tax processes, connecting device security and tax compliance in a single scope.

Want to turn device security and access governance into automated processes integrated with your ERP?

Talk to a Vottax specialist to evaluate how tax automation and control layers can reduce risks and accelerate incident response in your operation.