What Is a SIM-Swap Attack and How Can You Reduce the Risk?

A SIM-swap attack attempts to take control of a phone number so an attacker can receive calls or text messages intended for the victim. That can expose accounts that rely on SMS recovery.

How the attack works

A criminal may use stolen personal information, social engineering, or a compromised carrier account to persuade a provider to move a number to another SIM or eSIM. The victim may suddenly lose cellular service.

Reduce carrier-account risk

Ask your carrier about account PINs, number-transfer locks, port-out protection, and identity-verification options. Set a strong account password and keep recovery details current.

Move away from SMS where possible

For important accounts, use phishing-resistant security keys or an authenticator method when available. Review backup and recovery codes and store them securely.

Secure email and financial accounts

Email often controls password resets for other services. Use a unique password and strong MFA, review recovery settings, and disable recovery methods you no longer control.

Respond quickly to unexpected service loss

Contact your carrier through an official channel, check critical accounts from a trusted device, and notify financial or exchange providers if account access may be at risk.

Preserve evidence and report

Record carrier notifications, account alerts, timestamps, and unauthorized transactions. Report suspected fraud to the affected services and relevant authorities.

Important: General educational information, not legal or financial advice. Outcomes depend on the facts and applicable law; no recovery or security result is guaranteed.