Checked 6 September 2026
Updated September 2026 · Verified against the Play Store listings on 6 September 2026 · every source is dated in the sentence that uses it
If you came here from an old post about the Xperia arc S and Jelly Bean, the Galaxy Ace or the Galaxy S II waiting for Ice Cream Sandwich, start with the radio: if the status bar never showed 4G or LTE, it is 3G only, and UK 3G is gone. Three switched its network off on 27 November 2025 (VodafoneThree, 15 December 2025, read 6 September 2026), with the other three networks dated below. On EE, Vodafone and O2 it can still call and text on 2G; on Three, which runs no 2G network (GOV.UK 2G guidance, updated 29 July 2026, read 6 September 2026), it gets nothing. The next section says whether to keep it as a Wi-Fi device or recycle it; the app floors below say what it can still run.
If your phone is newer, a Galaxy S21 that Samsung dropped from its February 2026 scope or a Pixel 6 in the last weeks of its five years, the security update date on the About screen decides the rest: what still arrives after the last patch, which UK apps have drawn their line, when a custom ROM is honest work, and when the answer is a replacement and a recycling label.
Treat a 3G only phone as a Wi-Fi device or recycle it, because VodafoneThree's release of 15 December 2025 says Three switched 3G off on 27 November 2025, and GOV.UK's 2G guidance, updated 29 July 2026, names Three as a provider with no 2G network, both read 6 September 2026.
Open Settings, About phone, Android version on any phone that still has 4G, because Google's Android Help page, read 5 September 2026, says that screen shows the security update date, the one number that matters.
Stop banking and paying on the phone once that date is more than a year old, because the NCSC's obsolete products guidance, read 5 September 2026, says the only fully effective mitigation is to stop using the obsolete product.
Replace it with a phone that prints an end date, because the Pixel 9a at £349 on the Google Store UK, seen 6 September 2026, is supported to April 2032 on the seven year rule Google prints on its availability page, read 5 September 2026.
Data checked: 6 September 2026.
Support periods are read from the manufacturer's own pages (Google's Pixel pages, Samsung's Security Updates Scope page and samsung.com/uk product pages, Fairphone's support article), app floors from each developer's help page, and every app whose floor is quoted here is also opened on its Google Play listing on the United States English storefront, read 6 September 2026, with the Android version each listing requires given in the footnote lines under the floors and the three listings whose requirement could not be read named there. Network dates come from GOV.UK and the operators; Ofcom's switch off page could not be opened on 5 or 6 September 2026 and is not cited. Press reports are named and dated in the sentence that uses them; three are older than twelve months (Telecoms.com, February 2024; 9to5Google, June 2025; GSMArena, November 2023), Android Authority's report of 13 September 2025 crosses that line a week after this page went up, and all of them are used only for the dates and policies they report. Nothing here rests on our own use of the phones or apps.
The Xperia arc S, Galaxy Ace, Wildfire S and Galaxy S II posts that brought you here date from the same 2011 to 2013 window, and nothing below rests on their update history, only on their radios: if the status bar never showed 4G or LTE when the phone last had a SIM, everything below applies.
In 2026 the radio is the limit, not the software. Vodafone and EE finished their 3G shutdowns by February 2024 (Telecoms.com, 28 February 2024, read 5 September 2026), Three switched 3G off on 27 November 2025 (VodafoneThree, 15 December 2025, read 6 September 2026), and O2's page, updated 22 June 2026 and read 6 September 2026, still says most of its 3G network is off, that some areas may keep a signal during the early part of 2026
, and gives no completion date. GOV.UK's 2G guidance, updated 29 July 2026 and read 6 September 2026, says a customer of a provider that does not operate a 2G network, such as Three, Superdrug Mobile and Smarty
, is not affected by the 2G switch off, which is the polite way of saying a non 4G phone on Three gets nothing, while EE, Vodafone and O2 still run 2G for calls and texts. That lifeline has a date: GOV.UK's connectivity timeline, updated 29 July 2026 and read 6 September 2026, has EE retiring 2G from May 2029, Virgin Media O2 from summer 2029 and VodafoneThree in spring 2030, and the same 2G guidance, updated 29 July 2026 and read 6 September 2026, says operators will switch 2G off between 2029 and 2033, so any replacement needs 4G calling.
So a 2011 Xperia in the UK today is a Wi-Fi device: no 3G data on any network, nothing on Three, no Play services, because Google's page read 5 September 2026 puts the floor at Android 7.0, and no WhatsApp at all, because the WhatsApp Help Center read the same day already needs Android 5.0 and needs Android 6.0 from 8 September 2026. The LineageOS device list, read 5 September 2026, carries no 2011 era Xperia, and Three's Reconnected scheme, read 5 September 2026, wants phones capable of a 4G connection and ideally less than 5 years old
, so an arc S sent there would be recycled, not reused (Three).
On a Pixel or any near stock phone, open Settings, tap About phone, then Android version: Google's Android Help page, read 5 September 2026, says that screen shows the Android version, the Android security update date and the Google Play system update date. On a Samsung Galaxy the update itself lives under Settings, Software update, and the Android version under Settings, About phone, Software information, per Samsung UK's support page, read 6 September 2026, which names the Android version but not the patch date; our page on how to update your Android version shows the security patch line on that same Software information screen, tap by tap.
The blunt part: the version number alone tells you almost nothing; a phone on Android 14 can be fully patched and a phone on Android 16 abandoned. A normal result on a supported phone is a security update date inside the last three months, not the last month: Android Authority reported on 13 September 2025 that monthly bulletins now carry only actively exploited flaws, most fixes ship quarterly in March, June, September and December, and the July 2025 bulletin held zero CVEs (Android Authority, read 5 September 2026). So two months old is normal; more than twelve months old, on a phone the maker no longer lists, is the end.
Three streams reach an Android phone and two of them end when the maker walks away. The Android version and the security patch come from the manufacturer. The third, the Google Play system update, comes from Google: Project Mainline, introduced in Android 10, updates components such as Bluetooth, media codecs and Wi-Fi outside the normal release cycle, and its module list names no kernel, bootloader, modem firmware or vendor code (Android Open Source Project, read 6 September 2026). That is why an abandoned phone shows a Play system update dated last month beside a security update date a year old: a normal result, not a substitute. Mainline arrived with Android 10, per the same AOSP page, so a phone on Android 9 or lower gets none of it: whatever the About screen shows, nothing from Google reaches its system layer either. The blunt part: nothing Google pushes through Play patches the modem, the kernel or the bootloader.
Two floors sit under all of this. Google's Play services page, read 5 September 2026, says Google Play services are only supported on devices with Android 7.0 (API level 24) and up
. Chrome sits higher: Google's Chrome Community announcement, reproduced by 9to5Google on 26 June 2025 and read 6 September 2026, said Chrome 138 was the last version for Android 8 and 9, Chrome 139 requires Android 10, and Older versions of Chrome will continue to work, but there will be no further updates released for users on these operating systems
. On an Android 8 or 9 phone Firefox is the browser still moving: Mozilla's requirements page, read 5 September 2026, puts Firefox 155 at Android 8.0 or newer.
Play listings on the United States English storefront, checked 6 September 2026: Firefox Fast & Private Browser requires Android 8.0 and up, which matches Mozilla's own page. The Android version required could not be read on the listings for Google Play services or Google Chrome on 6 September 2026, so Google's own pages, cited above, are the only source for those two floors.
The floors that matter in the UK, each read from the developer's own page on 5 September 2026:
Play listings on the United States English storefront, checked 6 September 2026: Google Wallet requires Android 9 and up · HSBC UK Mobile Banking requires Android 9 and up · Nationwide Banking App requires Android 8.0 and up · NHS App requires Android 8.0 and up · GOV.UK One Login requires Android 10 and up · Santander Mobile Banking still requires Android 9 and up, one version below the floor Santander's own page states, so that page is the source used above. The Android version required could not be read on WhatsApp Messenger's listing on 6 September 2026, so the WhatsApp Help Center, cited above, is the only source for its floor.
Lloyds, Halifax, TSB, Barclays, NatWest, Monzo and Starling publish no Android floor that could be read on 5 September 2026, so none is stated here. The blunt part for an Android 9 phone: Santander leaves in September 2026, Wallet left Android 8 on 10 June 2024, and Chrome is frozen at 138.
The NCSC's consumer advice, reviewed 21 December 2021 and still live when read on 5 September 2026, says if possible, avoid buying and using phones that are no longer supported
(NCSC). Its obsolete products guidance, read 5 September 2026, is blunter: The only fully effective way to mitigate this risk is to stop using the obsolete product
. Fairphone tells Fairphone 3 owners, whose support ended in August 2026, the same: no banking or anything needing an internet connection (Fairphone Support, read 5 September 2026).
The mitigations are things you stop doing, and the list is short. Move banking, email and two factor codes to a supported phone first. Keep Play Protect on and install nothing from outside the Play Store. Prefer home Wi-Fi to public networks. If the phone already behaves oddly, our page on the signs of Android malware is the next stop. Passing a bank's integrity check is not the same as being safe: Google's Play Integrity verdicts page, updated 1 May 2026 and read 5 September 2026, says the strong verdict requires a recent security update only on Android 13 and higher, the window our twelve month threshold is taken from, so an unpatched Android 12 phone can still pass a check that proves nothing about its firmware.
Read the costs before the names. Unlocking the bootloader erases the phone, may void the warranty, and a wrong image can soft brick it, per Tech Advisor's guide of 23 January 2026 (Tech Advisor, read 5 September 2026). Google Wallet then stops: its help page, read 5 September 2026, says tap to pay does not run on phones that are rooted, run a custom ROM or have an unlocked bootloader, and GrapheneOS's own usage guide, read 5 September 2026, confirms it passes only the basic integrity check; whether your bank follows depends on which verdict it asks for. Nor can a community build patch closed firmware: GrapheneOS says it can only fully provide security updates to a device provided that the OEM is releasing them
(GrapheneOS FAQ, read 5 September 2026). On a Xiaomi the cost is doubled: since HyperOS, Xiaomi has said it will not update any phone with an unlocked bootloader, and relocking restores eligibility (GSMArena, 8 November 2023, read 5 September 2026, a report older than twelve months). A normal result after flashing is a phone that boots to a blank setup screen with nothing on it.
With that accepted, the projects are real. LineageOS 23.2, announced 8 February 2026 and built on Android 16 QPR2, picks the Android Security Bulletins into every supported version monthly (LineageOS, read 6 September 2026); the device list showed 311 of 604 listed models under the default filter on 5 September 2026 and warns that unlisted devices are unsupported. GrapheneOS supports only Pixels from the 6 family to the 10a, and its release of 13 August 2026 is based on Android 17 (GrapheneOS releases, read 5 September 2026). For a Fairphone 3, Murena said on 29 April 2026 it will keep /e/OS updated for two more years, which runs to 2028 (Murena, read 5 September 2026). This route is for an owner whose model is on one of those lists, who does not pay with the phone, and whose bank accepts the basic verdict or lives on a second device.
Replace the phone when any one of these is true: the security update date is more than twelve months old and you bank, pay or read email on it; an app you cannot do without has raised its floor above your version; or the phone is 3G only.
The PSTI regulations, in force since 29 April 2024, require any phone sold new in the UK since that date to carry a published defined support period
with an end date, in plain English, free and never shortened (legislation.gov.uk, read 5 September 2026); for older phones the maker's list is the only source. Samsung prints Security Update Period (Valid until)
under Specifications and Software Support on its samsung.com/uk product pages; the Galaxy A56 5G page, read 5 September 2026, prints 31 March 2032. Google publishes a rule instead: Pixel 8 and later get seven years of OS and security updates from first availability on the US Google Store, the Pixel 6 and 7 families five years, the Pixel 5a and earlier none (Pixel Phone Help, read 5 September 2026), and its availability table, read 5 September 2026, makes that Pixel 6 to October 2026, Pixel 7 to October 2027, Pixel 9a to April 2032 and Pixel 10a to March 2033. On the Google Store UK on 6 September 2026 the Pixel 10a was £429 and the Pixel 9a £349, prices seen that day only.
The blunt part about Samsung is that up to 7 years
is not every Galaxy. Its Security Updates Scope page, read 5 September 2026, puts the Galaxy S23 to S26 families, the recent Z Fold and Z Flip models, and, under its enterprise heading, the Galaxy A54 to A57 5G on the monthly tier; most other A, M and F models sit on the quarterly tier, the S22 and S21 FE with them, and the S21, S21+ and S21 Ultra on neither; SamMobile reported on 3 February 2026 that the S21 trio had left the February 2026 scope (SamMobile, read 5 September 2026). A used Galaxy S23 is still on Samsung's monthly list; a Galaxy S21 at any price is not.
Back it up first, then wipe it. Google's factory reset page, read 6 September 2026, says a factory data reset erases your data, tells you to back up to your Google Account first and to know your Google Account password and screen lock, which the reset asks for. MoneySavingExpert's guide of 26 May 2026 adds: remove the SIM and the Google account, and on a Samsung switch off Reactivation Lock (MoneySavingExpert, read 5 September 2026). Our page on backing up an Android phone covers the backup half. A normal result is a phone that boots to the language screen and asks for nothing you know.
The UK schemes, quoted for mechanics, not prices: Samsung UK trade in, read 6 September 2026, takes phones from various brands as a discount on a new Galaxy and gives you seven days from receiving the new phone to send the old one back; O2 Recycle, read 5 September 2026, locks a quote for seven days, insures the free postage to £150 and pays within 3 to 5 working days; EE, read 5 September 2026, accepts a phone you no longer use whatever network it came from. If a trader offers nothing, Three's Reconnected scheme above takes 4G capable phones, and Recycle Your Electricals, read 6 September 2026, says its locator lists almost 30,000 drop off points.
The honest limit of this page is that it cannot tell you what your own bank will do next month: three UK banks print a floor this page could read on 5 September 2026 and seven print no floor that could be read that day, and a phone that passes every check today can still be refused by an app update tomorrow. It also cannot revive a phone whose modem only speaks 3G. What it can give you is the date, the list and the floors.
Open Settings, tap About phone, then Android version, and read the Android security update date; Google's Android Help page, read 5 September 2026, says that screen shows it. A date inside the last three months is normal, because most fixes now ship quarterly. A date more than twelve months old, on a phone the maker no longer lists, means the updates have stopped. Checked 6 September 2026.
Not for banking, email or two factor codes. The NCSC's obsolete products guidance, read 5 September 2026, says the only fully effective mitigation is to stop using the obsolete product. As a Wi-Fi only device for photos or music, with Play Protect on and nothing installed from outside the Play Store, the risk is much lower. Checked 6 September 2026.
It depends on the bank's own minimum. Santander needs Android 10 and its September 2026 update will not run on Android 9, HSBC UK runs on Android 9 with Android 10 for its newest features, and Nationwide needs Android 8.0 or higher, all read from the banks' own pages on 5 September 2026. Seven other UK banks publish no floor that could be read that day. Checked 6 September 2026.
Only if the phone runs Android 9 or higher and keeps its original locked software. Google Wallet Help, read 5 September 2026, says Android 9 has been required since 10 June 2024, and a second Google page read the same day says tap to pay does not run on rooted phones, custom ROMs or unlocked bootloaders. A phone on LineageOS or GrapheneOS cannot pay. Checked 6 September 2026.
No. The LineageOS device list, read 5 September 2026, includes no 2011 era Xperia and warns that unlisted devices are unsupported. Even where a build exists, unlocking the bootloader erases the phone and ends Google Wallet tap to pay. For a 2011 Xperia the radio is the limit: it is 3G only, and every UK 3G network is off, Three's since 27 November 2025, or, on O2, all but the last areas, per VodafoneThree, Telecoms.com and O2, read 5 and 6 September 2026. Checked 6 September 2026.
On 6 September 2026 the Google Store UK listed the Pixel 9a at £349 and the Pixel 10a at £429, and Google's Pixel Phone Help page, read 5 September 2026, promises seven years of OS and security updates from first availability, which works out to April 2032 for the 9a and March 2033 for the 10a. Whatever you buy, read the published UK security update end date first. Checked 6 September 2026.
Checked 6 September 2026: first publication; Google, Samsung and Fairphone support pages, UK bank, NHS, GOV.UK, LineageOS and GrapheneOS pages and the UK operators' switch off pages were read on 5 September 2026, and the GOV.UK 2G and timeline pages, VodafoneThree, O2, the two Google Store UK product pages, the LineageOS changelog, the AOSP modular system page, 9to5Google, WABetaInfo, Samsung's support and trade in pages, Google's factory reset page and Recycle Your Electricals were re-opened on 6 September 2026, and the ten Play listings cited in the footnote lines (Google Play services, Google Chrome, Firefox, WhatsApp Messenger, Google Wallet, Santander Mobile Banking, HSBC UK Mobile Banking, Nationwide Banking App, NHS App and GOV.UK One Login) were read on the United States English storefront on 6 September 2026. The WhatsApp Help Center could not be re-opened mechanically on 6 September 2026 and keeps its 5 September read date. Samsung UK's trade in page gives a seven day window to send the old phone; a second figure on that page could not be confirmed and is not stated. Left out because the source could not be opened on either day: Ofcom's 3G switch off page and its locked handset ban, Samsung's Knox warranty flag, the Lloyds and Halifax minimum Android versions, and Currys' any brand recycling.
Checked 6 September 2026: an editor and house style pass after publication rewrote the title and three section headings as full clauses, cut the lead to the decision and moved the status bar test up into it, made every relative date absolute (Santander in September 2026, Google Wallet on 10 June 2024, the Galaxy S21 out of Samsung's February 2026 scope), shortened the capsule to four one sentence picks and the first table row to the radio test, replaced the Play footnote lines with the Android version each listing requires, moved the Play Integrity verdict onto the risk side of the ledger, split the five step checklist and the honest limit under their own heading, and withdrew four things that decided nothing: the Wikipedia sourced Xperia arc S upgrade history with the GSMArena report of 27 July 2012, the Google developer verification timetable paragraph with its link to our Android sideloading page, the per app developer and Contains ads metadata under the floors, and the note that O2 Recycle mentions no account requirement.