Home
...
Scams
Scam Advice (Fraudulent SIM Swap)

Scam Advice (Fraudulent SIM Swap)

SIM swap fraud

SIM swap fraud starts when a scammer convinces your operator to move your number to another SIM or eSIM. They can then receive your calls and text messages, including one-time codes. With those codes, they may try to access your email, bank or other accounts.

The setup

The setup

Stolen personal details

Gathered via phishing or data breaches

The attacker calls your operator posing as you, requesting a replacement SIM
The hook

The hook

Just enough ID to pass:

Name, DOB, Address, Account PIN
‘I’ve lost my phone. I need my number moved to this new SIM.’
The goal

The goal

Your phone number

Every code sent to it, redirected:

Bank OTPs and password resets now go straight to the attacker.
Infographic with two sections: left explains how fraudsters use SIM Swap fraud to intercept mobile codes through impersonation, with icons and red warning signs; right offers protection tips—act fast, set a PIN, and lock down your number.

How the scam works

Scammers rely on urgency and trust. They create time pressure so you act before verifying, and they impersonate a sender you’d normally trust without a second thought.

How to protect yourself

  • Add a PIN or passcode to your mobile account that’s required for any SIM change
  • Avoid using SMS as your only two-factor method — use an authenticator app where possible
  • Be cautious what personal details you share publicly (DOB, address) — these are used to pass identity checks
  • Ask your bank whether it checks for recent SIM changes before approving risky transactions (the GSMA SIM Swap API supports this)

National fraud reporting bodies

Action Fraud – report phishing to NCSC

The logo shows a black UK royal coat of arms on the left and the words “National Cyber Security Centre” in black text on the right, all on a light grey background, reflecting the organisation’s commitment to combating threats such as phishing, vishing and smishing.

FTC (reportfraud.ftc.gov) | FCC

The image shows the U.S. Federal Trade Commission seal on the left and the text “Federal Trade Commission ReportFraud.ftc.gov” on the right, against a light grey background. The seal features balanced scales, stars, and an eagle—a reminder to report online scams such as phishing, vishing, and smishing to protect yourself and others.

Canadian Anti-Fraud Centre

The image shows the Canadian flag—a red maple leaf between two red bars—beside the words “Government of Canada” in bold black letters on a light grey background, often seen in official communications warning about online threats such as phishing, vishing and smishing.
Australia

Scamwatch (ACCC)

Australian Government logo beside ScamWatch logo and text: “ScamWatch. Stop. Better safe than scammed.” Both logos are on a light grey background with simple blue and orange colour accents, reminding Australians to stay alert against phishing, vishing, and smishing scams.
European Union

Your national CERT or police cybercrime unit

ENISA logo with blue EU flag and stars forming a semicircle around red “enisa” text. To the right, grey text reads “European Union Agency for Cybersecurity.” White background. ENISA plays a key role in protecting against cyber threats such as phishing, vishing, and smishing.

Mobile network operators

If you think you’ve been targeted by a scam, tell your mobile operator. Reports help operators protect you and other customers. Always contact them through their official website or app, never through links or numbers in a suspicious message. The operators below are examples only, not a complete list. Your operator will explain how to report the scam and what to do next.

EE, O2, Vodafone & Three – forward scam texts free to 7726

Report text, email or phone fraud directly

The image shows the Ofcom logo with “Ofcom” in bold pink-red letters above a horizontal line featuring navy, green, orange, purple, and pink segments, all set against a light grey background—a familiar emblem often seen in campaigns raising awareness about scams such as phishing, vishing and smishing.
A black and white graphic of a laptop screen displaying the words “Report Fraud.” The letter “o” in “Report” is stylised as a pie chart, serving as a subtle reminder to be vigilant against modern threats like phishing, vishing, and smishing. The background is plain and light grey.

Report text, email or phone fraud directly

The image shows the AT&T logo: a blue and white globe with curved stripes on the left and the black letters “AT&T” in bold sans-serif font on the right, all on a light grey background—often recognised in campaigns raising awareness about scams such as phishing, vishing, and smishing.

Forward suspicious texts claiming to be Verizon

The image shows the Verizon logo with the word “verizon” in lowercase, bold red letters on a white background. The “v” has a gradient with orange and yellow hues, adding a vibrant touch to the design—perfect for raising awareness around digital threats such as phishing, vishing, and smishing.

Scam Shield – report scams and spam

T-Mobile logo on a light grey background, featuring a bold magenta “T” symbol on the left and the word “Mobile” in magenta text on the right, using a serif font with a capital “M” and the rest of the letters in lowercase—a trusted icon often seen in communications warning customers about threats like phishing, vishing, and smishing.