SIM Swapping & Phone Number Takeover
In a SIM swap, a criminal convinces your phone carrier to move your number to their SIM card or another carrier. Then they get your text messages, including login codes, and can take over your email, bank and payment accounts.
- Everyone
Warning signs
- Your phone suddenly shows no service or “SOS only” where it normally works
- Texts or emails from your carrier about a SIM change, port request or new device you didn’t make
- Password reset or login alerts you didn’t request
- Friends say they got strange messages from your number
Act fast
- Contact your carrier immediately from another phone or in a store, and tell them you’re a victim of a SIM swap.
- Secure your email from a computer: change the password and sign out of all other sessions.
- Call your bank and payment apps, and check for unauthorized transfers.
- Change passwords and switch two-factor authentication off text messages where possible.
- Report it to the FTC and the FBI’s IC3. See Reporting Cybercrime.
Prevention
- Set a carrier account PIN or passcode that’s different from other PINs.
- Turn on number lock or port-out protection, offered by major carriers.
- Use an authenticator app or security key instead of text messages for two-factor authentication on email, banking and other important accounts. See Two-Factor Authentication.
- Limit personal details you share online, like your birthday and phone number, which criminals use to impersonate you.
- Watch for phishing that tries to get your carrier login.
Carrier rules: FCC rules adopted in 2023 require mobile carriers to use secure methods to verify customers before SIM changes and number transfers, and to notify you of these requests. If your carrier doesn’t, file a complaint with the FCC.
Standards & references
Last updated: