Account security
What Is SIM Swapping?
SIM swapping is when someone tricks a carrier into moving your number. This guide explains the risk and the consumer protections that actually help.
How the scam reaches a real person
Carriers allow number moves because people change phones and companies. Criminals abuse that process. With a name, a birthday, an account detail from a leak, or a convincing story, they may try to pass as the account holder. The FCC notes that a mobile number can be the key to financial accounts because businesses still use texts to verify identity. That is why what is SIM swapping matters after a data exposure: the number became easier to target, not because the SIM physically left your pocket. There is also a version that uses an eSIM profile instead of a plastic card. The FCC says an embedded SIM can reduce some physical-card theft, but account-level tricks can still happen. The lock you need is on the carrier account, not only on the tray.
Warning signs that are worth a carrier call
The FCC says loss of service is often the first sign of a port-out scam. Act that day. Do not call a number that arrived in a text about the outage. Use the number on a paper bill, the official app you already installed, or the carrier site you type yourself.
- The phone suddenly shows no service, or only emergency calls
- You stop receiving expected texts
- The carrier confirms a SIM change or port you did not request
- Password-reset texts arrive for accounts you did not touch
- Friends say they got odd messages from your number
What a swap can and cannot do
A successful swap can intercept SMS codes and some voice resets. It does not automatically open an account that requires a passkey or an authenticator app on a device you still hold. That is why CISA keeps telling people to prefer stronger MFA than a text when the service offers it. A leaked password plus an intercepted SMS is a common pairing. A unique password plus a passkey breaks that pairing. A swap also does not replace identity theft of a Social Security number. Those are separate doors. Treat both if both are in play.
How to harden the line before anything happens
The FCC’s consumer advice is to be proactive:
On the official carrier app or site, look for settings that limit SIM changes or number ports. Names differ by company. Availability depends on the plan. Turn on any account alerts the carrier offers for line changes. Then move important logins off SMS-only codes: email first, then banks.
- Add a PIN or password on the mobile account if you do not already have one
- Do not give personal information to someone who called or texted you first
- If a caller claims to be the carrier, hang up and use a number you trust from the bill or official site
If you think the number already moved
The FCC’s sequence is immediate:
From a trusted device, change email and banking passwords. Enable a non-SMS second factor. Review sessions. Do not read codes to anyone who offers to “reverse the swap” for a fee. You may also report consumer fraud at ReportFraud.ftc.gov.
- Contact your phone company.
- Contact banks and other financial institutions.
- File a police report if the situation warrants it.
- Place a fraud alert and review credit reports.
- File an FCC complaint if you are a victim of a port-out scam, and report identity theft or fraud to the FTC.
What not to do
Understanding what is SIM swapping is enough to take the official protections. You do not need the attacker’s playbook.
- Do not hunt underground tutorials about swapping a number.
- Do not send a photo of your ID to an unexpected text.
- Do not assume a new phone automatically fixed the account PIN.
- Do not keep SMS as the only key to email after a scare.
Practical checklist
- Add a carrier account PIN on the official site or app.
- Turn on any SIM-change or port protection your plan includes.
- Move email and banking off SMS-only MFA.
- If service dies, call the carrier on a known number the same day.
- Alert banks if codes or transfers look wrong.
- Review credit if identity data may also have been used.
- File FCC and FTC reports when fraud is confirmed.
- Keep backup codes offline, not only in texts.
Frequently asked questions
Is a burst of spam texts the same as a SIM swap?
No. Spam is cheap. A swap usually shows up as lost service or codes landing somewhere else.
Will changing my phone number fix this?
Sometimes a new number is part of recovery after a messy port. Start by restoring and locking the existing line with the carrier. A new number does not replace unique passwords.
Does an eSIM make me safe?
It can reduce theft of a plastic card. It does not replace an account PIN or stronger login methods.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.