| 1 | Stop using the USB drive immediately. | Critical | Deleted file data may remain on the drive until new data overwrites the same storage space. | Close open files and stop copying, editing, or downloading anything to the USB drive. | Do not continue normal use of the drive. | Reduces the chance of permanent overwriting. |
| 2 | Do not save recovered files back to the same USB drive. | Critical | Writing recovered data to the source drive can overwrite other deleted files. | Prepare a separate internal drive or another storage device with enough free space. | Never use the affected USB as the recovery destination. | Preserves the remaining recoverable data. |
| 3 | Check the Recycle Bin or Trash and recent backups. | High | Some deletions are moved to the computer’s Recycle Bin or may already exist in a backup. | Search the Recycle Bin, Trash, file-history folders, cloud-synchronized folders, and offline backups. | Do not empty the Recycle Bin or remove backup copies. | Offers the safest recovery route without scanning the USB. |
| 4 | Safely disconnect the USB if it is no longer needed. | High | Safe removal helps prevent additional file-system changes and protects against data corruption. | Use the operating system’s eject or safely-remove function before unplugging the drive. | Do not pull the USB out while files are being accessed. | Limits further changes to the drive’s file system. |
| 5 | Scan the USB with a reputable data-recovery utility. | High | Recovery software can search file-system records and locate file content that is no longer listed normally. | Connect the USB as a read-only source when possible, run a deep scan, and preview files before recovery. | Do not install recovery software onto the affected USB drive. | May restore deleted files if their data has not been overwritten. |
| 6 | Create a sector-by-sector image before intensive recovery work. | Recommended | An image preserves the current condition of the USB and allows repeated scans without stressing the original media. | Save the image to a separate storage device, then perform recovery on the image copy. | Avoid repeated scans if the USB is unstable, disconnecting, or unusually slow. | Provides a safer working copy for complex recovery attempts. |
| 7 | Stop software recovery if the USB shows physical failure symptoms. | Critical | Repeated power cycles or scans can worsen damage when the device is failing electronically or mechanically. | Seek a qualified data-recovery specialist if the USB is not detected, becomes very hot, repeatedly disconnects, or reports an incorrect capacity. | Do not open, bend, heat, reformat, or repeatedly reconnect the drive. | Improves the chance of preserving the remaining media and controller data. |
| 8 | Recover files to a different drive and verify them. | Critical | A recovery process is incomplete until the restored files open correctly and contain the expected information. | Save files to separate storage, then check file names, sizes, formats, and important documents or photos. | Do not delete the original USB data until the recovered copies are verified and backed up. | Creates usable copies and reduces the risk of losing files again. |
| 9 | Format or reuse the USB only after recovery is complete. | Last | Formatting can remove file-system information needed by recovery tools and may overwrite recoverable data. | Confirm that all required files are safely stored elsewhere before formatting or replacing the drive. | Do not format when the primary goal is to recover deleted files. | Allows the USB to be reused only after data protection is complete. |