What is SIM swapping?
Definition
SIM swapping is when a criminal gets your mobile carrier to move your phone number to a SIM card they control, so they receive your calls and texts, including the codes used to log in to your accounts.
- Category
- Attacks
- Also called
- SIM swap, SIM swap scam, SIM hijacking
- Last updated
Your phone number is tied to a SIM card. In a SIM swap, a scammer persuades your mobile provider to move that number onto a different SIM, one the scammer holds. From then on, calls and texts meant for you go to them.
The FTC describes the usual method: the scammer contacts the provider, claims your phone was lost or damaged, and asks for a new SIM tied to your number. The FTC also notes that insiders at a carrier can be involved in some cases.
Why a phone number is worth stealing
Many banks, email providers and social networks send a login code by text. If the scammer has your number, they get the code. Add a leaked or guessed password and they can reach your accounts. The FTC warns that a scammer with your login details could drain a bank account or take over your email and social media.
How you might notice
The FTC points to two signs: an unexpected notice that your SIM was activated on a new device, and a sudden loss of service on your own phone. If your phone drops to no signal for no clear reason and you receive a message from your carrier about a change you didn't make, treat it as urgent.
SIM swapping vs. port-out fraud
The FCC treats SIM swapping and port-out fraud (moving your number to another provider) together. Its rules, adopted in November 2023, require wireless providers to use secure authentication before they redirect a number to a new device or provider.
How to protect yourself
- 1
Set a PIN or passcode on your mobile account
Ask your carrier to add an account PIN, and a port-out or number lock if they offer one, so a caller can't change your SIM with only your name and address.
- 2
Use an authenticator app or security key where you can
Text codes travel over your phone number. For email, banking and other important accounts, switch to an authenticator app or a hardware security key.
- 3
Act fast if your phone loses service
If service drops without explanation, contact your carrier from another phone, tell them you didn't request a SIM change, and check your bank and email for activity you don't recognise.
- 4
Make your details harder to find
Scammers use your name, address and phone number to pass as you. Serus finds where that information is listed online and removes it where it can be taken down.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
How do I know if I've been SIM swapped?
The FTC lists an unexpected notice that your SIM was activated on a new device and a sudden loss of service. If either happens, call your carrier right away from another phone.
What do carriers have to do to stop SIM swaps?
The FCC's rules adopted in November 2023 require wireless providers to use secure customer authentication before redirecting a number to a new device or provider, and the methods must work for customers with different needs.
Why do scammers want my phone number?
Many services send login codes by text. With your number, a scammer receives the codes, and the FTC warns that with your login details they could drain a bank account or take over your email and social media.
Sources
Something wrong or out of date? Tell us and we'll re-check it.