How to protect yourself from SIM swap scams
Updated: Sep 14
Your mobile number can be more than a way to take calls. It can be a key to your bank, PayPal, email, shopping accounts, and even charges on your mobile bill. That is why SIM swap scams are so damaging.
A SIM swap happens when a fraudster convinces your mobile provider to move your number to a SIM card or eSIM they control. Once that happens, your phone may lose signal, while the scammer starts receiving your calls and text messages. If your accounts use SMS codes for login or password resets, the attacker may be able to break in quickly.
This guide is for general information only. If money has been stolen or you are locked out of financial accounts, contact your bank, payment providers, mobile phone provider and the police straight away.
How SIM swap scams work
The fraudster usually starts by gathering personal details. They may get these from data breaches, phishing emails, scam calls, social media, or stolen documents. They do not always need much. A name, date of birth, address, and mobile number can be enough to sound convincing.
They then contact your mobile provider and pretend to be you. They may claim their phone was lost, or their SIM is damaged, or they want to transfer the number to a new device. If the provider accepts the request, your number moves to the scammer’s SIM.
From there, they can try to:
Receive SMS login codes for banks, email, PayPal, and shopping accounts
Reset passwords on accounts linked to your phone number
Approve payments or account changes where text verification is used
Call your bank while appearing to control your number
Make charges to your mobile bill if your account allows it
The danger is speed. Once the number moves, attackers often act before the real owner understands what has happened.
Warning signs that your number has been taken
A SIM swap may look like an ordinary network problem at first. Poor signal happens. Phones glitch. Networks have outages. The warning sign is when the loss of service comes with account alerts or login problems.
Watch for:
Sudden loss of signal
Your phone shows “No Service” or “Emergency Calls Only” while other people nearby still have signal.
Unexpected messages from your provider
You receive a text or email about a PAC, SIM change, number transfer, or new device that you did not request.
Password reset emails
You get alerts saying someone is trying to reset your email, bank, PayPal, or social account passwords.
Bank or payment alerts
You see login attempts, new payees, declined payments, or purchases you do not recognise.
You cannot receive calls or texts
Friends say your number rings, but your phone never receives the call.
If more than one of these happens at the same time, treat it as urgent.
Lock down your mobile provider account
Your first defence is with your network provider. Many people secure their bank but forget that their mobile account can unlock everything else.
Contact your provider and ask what extra protection they offer. Depending on the provider, you may be able to set up:
A strong account PIN or memorable word
Extra checks before any SIM replacement or number transfer
A note requiring in-store checks for major changes
Notifications for SIM swaps, eSIM activation, or PAC requests
A block on premium rate or charge-to-mobile services
Do not use easy answers such as a birthday, pet name, postcode, or mother’s maiden name if those details could be found online. Choose something random and store it in a password manager.
Also check old accounts. If you have moved provider before, make sure unused accounts are closed and old online portals do not still contain personal information.
What to do if you think you have been SIM swapped
Act quickly and in this order.
Contact your mobile provider
Tell them you suspect a fraudulent SIM swap. Ask them to suspend the number, reverse the transfer, and secure the account with stronger checks.
Call your bank and payment providers
Use another phone if yours has no service. Ask them to freeze suspicious activity, check recent transactions, and block new payees if needed.
Secure your email
Change the password, sign out of all devices, and replace SMS verification with an authenticator app if possible.
Change key passwords
Start with banking, PayPal, email, mobile provider, shopping accounts, and social accounts.
Report the fraud
In the UK, report fraud to Action Fraud if you are in England, Wales, or Northern Ireland. In Scotland, report it to Police Scotland. Also follow your bank’s fraud reporting process.
Keep evidence
Save texts, emails, screenshots, call times, transaction records, and names of anyone you spoke to.
The habits that protect you most
The strongest protection comes from a few habits used together. Put a PIN on your mobile account. Move important logins away from SMS. Keep personal details private. Turn on alerts. Treat sudden signal loss as a warning if it comes with account activity.
A mobile number should not be the master key to your digital life. Take an hour to review your most important accounts now, before a fraudster tries to do it for you.
This article has been created for information purposes only and is not considered financial advice.
Comments