SIM Swap Fraud

A scammer calls your mobile provider, pretends to be you, and gets your phone number transferred to their SIM card. Within minutes, they reset your passwords, drain your bank accounts, and steal your identity. You only find out when your phone suddenly stops working.

📊 The Scale

Source: UK Finance 2025, Action Fraud.

🎭 How It Works

• 1. Scammer gathers your personal info from data breaches, social media, phishing, or dark web data dumps.
• 2. Scammer calls your mobile provider (O2, EE, Vodafone, Three) pretending to be you. They say they have lost their SIM and need a replacement.
• 3. Provider transfers your number to the scammer SIM. Your phone loses signal.
• 4. Scammer resets all your passwords via SMS codes. They drain bank accounts, steal crypto, and access emails.

🚩 Warning Signs

• 🔴 Your phone suddenly loses signal or shows "No Service" while you are in a coverage area.
• 🔴 You cannot send or receive SMS messages.
• 🔴 Your provider sends "SIM change" notification via email or text — investigate immediately.

🛡 Protection Steps

• ✅ Set a SIM PIN or passcode with your mobile provider. O2, EE, Vodafone, and Three all support account passwords that block SIM changes without the code.
• ✅ Use authenticator apps (Google Authenticator, Authy, Microsoft Authenticator) for 2FA — NOT SMS. SMS-based 2FA is vulnerable to SIM swap.
• ✅ Use a unique, strong password for your mobile provider account. Do not reuse passwords.
• ✅ If your phone suddenly loses signal, call your provider immediately using another phone. Ask if a SIM swap was requested.

⚡ If you are attacked: Call your bank immediately. Change passwords. Report to Action Fraud on 0300 123 2040. See our Identity Fraud guide and Recovery Guide.