What is SIM Swapping?

It is a relatively new and sophisticated form of fraud that allows hackers to gain unauthorized access to your bank accounts, credit card numbers, and other personal and confidential information.
A typical mobile phone SIM card stores user data on GSM (Global System for Mobile) phones. Its main use is to authenticate mobile phone subscriptions. Therefore, without a SIM card, GSM phones cannot access any mobile network.
Basically, the exchange of SIM cards is identity theft that attacks the greatest vulnerability of the system: the agnosticism of the platform.

How exactly does SIM swapping work?

Once the fraudulent gather enough information about the victim, they create a false identity. And then,

  • They call the victim’s cellphone service provider claiming that their SIM card is lost/damaged. They request the service provider to activate a number in their possession.
  • Most service providers won’t pay heed to such requests until the security questions are answered satisfactorily. But the SIM swappers come prepared. They make use of all the sensitive data collected through the data dumps, and henceforth do not arouse any doubts regarding their authenticity. Once they have access to the victim’s phone number, they target bank accounts.
  • Many banks will send you OTPs to login to your bank accounts or reset a password to mobile phone via SMS, which gives direct access to fraudulent. This means they can now successfully request and receive the code and exploit your bank accounts to their advantage.
  • Next, SIM fraudsters try to shield the transactions using a parallel system. They usually create a second bank account under the victim’s name. Thus, when criminals execute a transfer between two accounts, it appears to the system that the victim is transferring funds between two parallel accounts.

How to prevent SIM frauds?

Major US carriers offer additional security features that can help prevent this type of fraud.

  • AT&T has "additional security," a feature that requires you to provide an access code for any phone or online interaction with an AT&T customer representative. You can activate it by logging into the AT&T web panel or the myAT & T app.

  • Sprint asks customers to set a PIN and security questions when establishing service.

  • T-Mobile allows subscribers to create a "watchword", which they will need when contacting T-Mobile customer service by phone. You can set one up by visiting a T-Mobile store or by calling customer service.

  • Verizon allows customers to set an account PIN, which they can do by editing their profile in their account online, calling customer service, or visiting a Verizon store.


  1. Check with your mobile operator if you do not have network connectivity and do not receive calls or SMS for unusually long periods.

  2. Do not neglect the messages sent by your network provider that highlight a probable SIM swap. Remember to respond quickly to such messages.

  3. Never turn off your smartphone in case you receive numerous unknown calls. It could be a ploy for you to turn off your phone and prevent you from noticing a disturbing network connection. Even if you are frustrated by such events, do not turn off your smartphone.

  4. Sign up to receive instant alerts (both SMS and emails) that inform you of any activity related to your bank account.

  5. Check your bank statements and online banking transaction history regularly to identify any problems or irregularities. Almost all banks offer mobile apps to their customers that allow them to pay their bills, recharge their mobiles, book bus tickets, etc. they also allow the user to take a look at the last 5 transactions, check the balance, etc., use such mobile banking applications to stay safe while continuing to enjoy the benefits of convenient and secure banking.


An article by Munna Suprathik