Methods, systems, and computer program products for disabling a mobile phone suspected of being a trigger for a bomb are provided. Embodiments include tracking, by one or more data communications servers of the data communications network, location, motion, and usage of a mobile phone; determining, by the one or more data communications servers, whether the location, the motion, and the usage of the mobile phone matches a suspect pattern of location, motion, and usage; and disabling, by the one or more data communications servers, the mobile phone only from receiving messages if the location, the motion, and the usage of the mobile phone matches a suspect pattern of location, motion, and usage.