SIM Swap Scams: How They Work and How to Stop Them

In a SIM swap attack, a criminal convinces your mobile carrier to transfer your phone number to a SIM card they control. Once they have your number, they receive your calls and text messages, including security codes.

Why it is dangerous

Many accounts use text messages for password resets and verification. With your number, an attacker can try to take over email, social media and even bank accounts.

How it happens

• Social engineering: they call the carrier pretending to be you.
• Insider help: a dishonest employee processes the swap.
• Personal details gathered from data breaches and social media.

Warning signs

Your phone suddenly loses service, you cannot make calls or send texts, and you receive alerts about logins or password changes you did not make. If this happens, contact your carrier right away from another phone.

How to protect yourself

• Set a PIN or passcode on your carrier account.
• Ask whether your carrier offers a SIM lock or port-out protection.
• Use an authenticator app or security key instead of text-message codes.
• Share as little personal information as possible publicly.
• Use a unique password for your email, and secure it first.

What to do if you are a victim

Call your carrier, contact your bank, change passwords from a safe device, and report the fraud to the authorities. Moving away from text-message verification removes the main goal of this attack.