SIM Swap Scams

The Threat Explained: A Step-by-Step Attack

1. Gathering Information: The scammer collects your personal data (name, address, date of birth) from online data breaches, social media, or other scams.

2. Impersonation: Armed with your personal information, the attacker impersonates you to your carrier claiming a lost phone to request a number transfer to their SIM.

3. The Swap: The carrier, believing they are talking to you, deactivates your SIM card and ports your number to the scammer’s SIM. Your phone suddenly loses all service.

4. Account Takeover: Now in control of your number, the scammer intercepts your text-based verification codes to reset passwords and gain access to your accounts, often emptying them in minutes.

The Impact is Real and Growing

This is not a hypothetical threat. Recent reports indicate a 1,055% surge in SIM swap fraud, with losses amounting to millions. The most chilling incidents involve:

• Financial Ruin: Victims have had their bank and crypto accounts drained in minutes, with one T-Mobile customer being awarded a $33 million settlement after an attack cost them millions.

• Identity Theft: Hackers gain control of social media to run scams and damage your reputation.

Urgent Actions Required

If You Suspect a SIM Swap

• Contact Your Mobile Carrier: Use another phone to immediately call your carrier’s fraud department. Lock your account and reverse the swap.

• Alert Financial Institutions: Alert your bank, credit card companies, and any investment platforms to freeze your accounts and monitor for suspicious activity.

• Secure Your Email & Accounts: Reset affected accounts with a different device to log in and change passwords.

Proactive Measures: To Prevent an Attack

• Set a Carrier PIN: Call your mobile provider today and add a dedicated PIN or passcode for your account. This is your best defense.

• Use Authenticator Apps (Not SMS): Use authenticator apps like Google Authenticator for MFA instead of SMS codes. These codes are tied to your physical device, not your phone number.

• Limit Public Information: Be mindful of the personal details you share on social media.

Conclusion: Don’t Be a Victim

Your phone number is a key to your digital life; a few minutes of proactive prevention can save you from a devastating attack.