SIM swap attack

A SIM swap attack happens when a criminal convinces or bribes your mobile operator to transfer your phone number to a SIM card they control. Once they have your number, they receive your calls and SMS messages, including one-time passwords, and can reset passwords on email, exchange and bank accounts that use SMS for recovery or two-factor authentication.

Attackers often gather personal details first through phishing, data leaks or social media, then pose as you at a store or call centre. A sudden loss of mobile signal or a message that your SIM has been changed is a warning sign.

To protect yourself, switch exchange and email accounts from SMS codes to an authenticator app or hardware security key, remove your phone number as a recovery option where you can, use a strong unique password for your email, and ask your operator about extra verification for SIM changes. If your phone suddenly loses service, contact your operator immediately.