SIM-swap account takeover

Summary

What the record shows

An offender gathers identity information and persuades or tricks a carrier into moving the victim’s number to a device they control. The victim’s phone loses service while password resets and SMS codes go to the offender.

US communications rules have been strengthened around SIM changes and port-outs, but account holders should still use carrier PINs, strong email security and app- or hardware-based authentication where available.

Key findings

What is established and what is not

Sudden loss of service combined with account alerts requires immediate carrier and financial-provider contact.
SMS authentication is better than no second factor but remains exposed to number takeover.
Protect the primary email account because it can be the recovery key for many other services.

Response and denials

The other side of the record

The reviewed material describes a distributed pattern using changing accounts, numbers and sites. No single identifiable operator or attributable operator denial was located.

Some approaches misuse the identity of mobile carriers, banks or account providers. Those impersonated organisations are not treated as participants; verify any contact through an independently located official channel.

Global Scam Report evaluation

Summary assessment

Established account-takeover method — high confidence. Loss of mobile service can have innocent technical causes, so carrier records are required to confirm an unauthorised swap.

Scope qualificationA port or SIM change record does not by itself identify the offender. Public claims should separate the event, resulting account access and attribution.

Reference record