Home › Buyer’s Guides › Are refurbished phones safe?
A Wall Street Journal column in August put numbers to something buyers have felt for a while: the risk in a refurbished phone is almost never the phone. It is who handled it before you. Here is what each of those risks looks like in the US market, and what actually protects you.
Writing in the Wall Street Journal on 23 August 2026, personal tech columnist Nicole Nguyen set out to answer whether refurbished phones are dangerous. Her conclusion was more useful than a yes or a no: preinstalled malware turns out to be rare, but four duller problems are common — devices locked out of mobile networks, non-genuine replacement parts, models too old to receive security patches, and outright counterfeits.
She also reported something that changes the arithmetic. Secondhand phones normally shed about 1% of their value a week, roughly half their value in a year. This year prices have gone the other way because of the memory-chip shortage. Sean Cleland, a vice president at wholesale marketplace B-Stock, told the Journal the average price of the company’s best-selling handset, the iPhone 15 Pro Max, climbed from about US$530 in January to US$560 by May.
That matters for safety, not just budgets. When used prices rise, the gap between a properly refurbished phone and a suspiciously cheap one narrows — and the incentive to cut corners on the ones that are still cheap goes up.
Ben Bernstein, who leads an advisory team at cybersecurity firm Huntress, gave the Journal a ranking that is worth internalising, because it is about custody rather than brand. The question is not whose website you bought from. It is whose hands the device passed through.
On marketplace listings, Bernstein’s point was blunt:
“Amazon.com may set the rules, but they aren’t the ones wiping the drive.” — Ben Bernstein, Huntress, quoted in The Wall Street Journal, 23 August 2026
Amazon told the Journal that its Renewed sellers must meet rigorous quality standards, and that smartphones require a full factory reset removing any spyware plus forensic destruction of personal data. Both things can be true at once: the standard exists, and the platform is not the party executing it.
| Tier | Who | What you’re actually getting |
|---|---|---|
| 1. Manufacturer | Apple Certified Refurbished; Samsung and Google certified programmes | Genuine replacement parts, current software, a new battery and outer shell on Apple iOS devices, and a one-year warranty. The refurbisher and the warranty provider are the same company. |
| 2. Carrier | Verizon, AT&T and T-Mobile certified pre-owned | The Journal put carrier stock second: these devices go through extensive processing including cleaning and data wiping. Narrower range, documented custody. |
| 3. Specialist refurbisher | OWC, Decluttr, KEH Camera, Sonos Certified Refurbished | Refurbishes in-house, so one business owns the grading, the battery standard and the warranty. Fifty-eight of the 102 sellers on our leaderboard sit in this category. |
| 4. Marketplace listing | Swappa, Back Market, Amazon Renewed, eBay Refurbished, Plug | The platform sets rules and handles disputes; a third-party seller you were never introduced to does the actual refurbishing. Quality is real but it is the seller’s, not the platform’s. |
| 5. Private sale | Craigslist, Facebook Marketplace, local classifieds | No grading, no warranty, no returns, and no party with a reputation to lose. The Journal’s advice was to avoid unknown individuals entirely. |
This is the one no inspection catches, and it is the reason seller provenance matters more in practice than any cosmetic grade. A phone reported lost or stolen — or simply not paid off on an instalment plan — can have its IMEI blocked, at which point it loses calls, SMS and mobile data no matter which SIM you put in it.
US carriers feed those reports into the GSMA’s shared device database, which operators in more than 150 countries query. A phone denied service by one network will not work on another, even with a new SIM.
Ask the seller for the IMEI and enter it at stolenphonechecker.org, the free CTIA tool powered by GSMA Device Check. A red status means wireless service may be blocked. The Journal also points readers to Swappa’s public IMEI lookup.
On an iPhone, separately confirm Activation Lock is off — a device still tied to the previous owner’s Apple Account is unusable even if its IMEI is clean. Ask the seller to show the phone at the Hello setup screen.
The Journal describes bargain-priced phones assembled from what it calls Frankenstein repairs — a faulty port here, a failing screen there, a battery of unknown origin. Tzvika Shahaf, chief product officer at data-erasure firm Blancco, framed non-genuine parts to the paper as a safety question as much as a security one: a low-quality battery is a fire risk, and a modified circuit board can bypass protections the phone is supposed to enforce.
You cannot inspect for this at the point of sale. What you can inspect is whether the seller publishes what it replaces and with what. A refurbisher that names its battery floor and its parts policy has made a claim you can hold it to. A listing that says only “Grade A” has not.
Our Grade Translator exists for exactly this reason: it puts every seller’s published condition wording side by side, so you can see which ones commit to a battery standard and which ones describe appearance alone.
A handset that no longer receives security patches is, as the Journal puts it, recycling-bin material regardless of how good it looks. Recent flagships from Apple, Samsung and Google now carry up to seven years of software updates — but that clock started at the model’s launch, not at your purchase.
The column recommends checking a specific model’s support window at endoflife.date before buying, and notes that stretching to a more recent generation buys you more years of life than the price difference usually suggests. That aligns with what we see in US pricing: the sharpest value is one generation back, not four.
Counterfeit handsets are convincing at a glance and obvious on inspection. The Journal’s tells, via NCC Group consultant William Enright: fonts and icon spacing that look slightly wrong, build quality that feels wrong in the hand, an absent Find My, packaging with spelling errors — and, definitively, the Google Play Store on a device being sold as an iPhone.
Enright told the Journal that counterfeits are a bigger problem outside the United States, and that the usual scheme is a quick profit on the initial sale rather than an attempt to hack the buyer. Imported grey-market listings are where the exposure sits.
This is the risk that made the headline and the one the Journal is most careful about. Its reporting cites a case in which a victim of a jury-duty scam had bought a refurbished Galaxy S24 Ultra online that security experts believed was carrying spyware. Experts also told the paper that preinstalled malware is genuinely uncommon.
The more mundane finding is the more alarming one. Shahaf estimates that about a third of refurbished phones still contain data from a previous owner — which can include sideloaded apps that never passed an app store’s security review. That is not usually malice. It is a device that reached its next owner without anybody qualified looking at what was left on it.
A factory reset on arrival costs you ten minutes and closes most of this. But note what the statistic is really measuring: it is a direct index of how many sellers skip the step.
The Journal sets a floor: a good reseller offers a return policy and a warranty covering defects for at least 90 days, and a year is better. It is a useful yardstick because a warranty is the only part of a listing that costs the seller money if the refurbishing was sloppy.
Held against that bar, the US market is genuinely mixed. Across the listings we track on our Best Buys page, 16 carry a full year and 6 carry 90 days — but 6 are sold on 30 days, below the Journal’s floor, and 14 state no fixed term at all, listing cover as varying by seller. That last group is a third of the sample, and it is concentrated exactly where you would expect: marketplace listings, where the term is set by the individual seller rather than the platform.
The Journal’s specific recommendation for Amazon buyers is worth repeating because it is a concrete, checkable difference rather than a vibe: choose Renewed Premium over standard Renewed. Premium carries a 365-day return period against 90 days, and a minimum 90% starting battery capacity against Amazon’s general floor of over 80%.
It would be easy to read the Journal’s reporting as an argument against marketplaces. It is not, and the distinction is worth getting right, because the good marketplaces do real work.
B&H Photo Used, a major retailer selling its own trade-in stock, holds the highest TrustScore on our US leaderboard at 82. Marketplaces score well too — Swappa (79), Back Market (77) and Plug (73) all sit in our Rated or Top Rated bands. What separates a strong marketplace from a weak one is enforcement: published condition standards, mandatory IMEI verification at listing, a funded dispute process, and sellers who can be removed.
The risk concentrates at the point where nobody is accountable for the individual device. That happens on a marketplace with thin enforcement, and it happens absolutely in a private sale. It is substantially less likely when the entity that graded the phone is the same entity that will answer the phone in six months.
Yes, when a verifiable party has inspected the device. The Wall Street Journal's August 2026 reporting found that preinstalled malware is rare, and that the common risks are network-blocked handsets, non-genuine parts, models past their security-update window and counterfeits. All four are risks about the seller rather than about refurbished phones as a category.
Yes. If the handset was reported lost or stolen, carriers can block its IMEI and it will lose calls, texts and mobile data on any network, whatever SIM is in it. This is the risk no physical inspection catches, which is why checking the IMEI before payment matters more than checking the cosmetic grade.
It depends on enforcement, not on the marketplace label. A cybersecurity adviser told the Journal that a platform can set the rules without being the party that wipes the device. Strong marketplaces publish condition standards, verify IMEIs at listing and fund a dispute process. Private sales between individuals carry the highest risk because nobody is accountable for the specific device.
Rarely. Security researchers told the Journal that compromised devices are uncommon. The more common problem is leftover data: Blancco estimates about a third of refurbished phones still contain information from a previous owner, including sideloaded apps that bypassed app store review. A factory reset on arrival resolves most of this.
Ask the seller for the 15-digit IMEI and enter it at stolenphonechecker.org, the free CTIA tool powered by GSMA Device Check. A red status means wireless service may be blocked. US carrier reports feed the GSMA database used by operators in more than 150 countries.
The Journal recommends it, and the difference is concrete rather than cosmetic: Renewed Premium carries a 365-day return period against 90 days for standard Renewed, and a minimum 90% starting battery capacity against Amazon's general floor of over 80%.
RefurbVerify is not affiliated with Dow Jones & Company. The Journal’s reporting is summarised and cited here for commentary; the full article is available at wsj.com.