Your mobile number can act like a key to your email, bank and shopping accounts. A SIM-swap scam tries to move that number to a phone controlled by a criminal. The victim may suddenly lose service while the attacker starts receiving calls and text codes.
This is not a reason to panic or abandon your phone. It is a reason to make the number harder to transfer, stop relying on text codes for important accounts and write down a recovery route. Most of the useful changes take less than an hour.
Understand the attack
A criminal may impersonate you to the mobile carrier and claim a SIM card was lost or damaged. If the carrier accepts the story, the number can move to a different device. The FTC’s SIM-swap fraud warning explains the risk and basic defences. The attack does not require the criminal to hold your actual phone.
Set a carrier account PIN
Log in through the carrier’s official website or app and look for account security, number lock, port-out protection or a transfer PIN. Features differ by carrier. Ask support what blocks an unauthorised transfer. Do not reuse your phone unlock code as the account PIN. Store recovery details somewhere secure and separate from the phone.
Move sensitive logins away from SMS
Text messages are convenient, but a stolen number can receive the same codes you do. Use a passkey, security key or authenticator app where supported. The passkey setup guide and plain-English passkeys explainer explain how passkeys work and what recovery choices to keep. Do not disable all second factors before a replacement is ready.
Watch for a sudden loss of service
A phone that unexpectedly shows no service may simply have a network fault. It can also be a warning sign if other accounts send unusual alerts. Try a second device or contact the carrier from a trusted number. If a SIM transfer is suspected, act quickly instead of waiting for service to return on its own.
Keep email as the top priority
Email often controls password resets for other accounts. Protect the main inbox with a unique password and a strong second factor. Review recovery addresses and signed-in devices. If an attacker controls the inbox, changing a shopping password alone will not solve the problem. Work from the most powerful account outward.
Avoid recovery messages from strangers
A fraudster may send a convincing warning that your number will be suspended unless you click a link. Another may call while pretending to be a carrier employee. The family plan for impersonation scams shows how impersonation can feel urgent. Open the official carrier app yourself, and never read a one-time code to an unsolicited caller.
Prepare for a phone emergency
Keep a trusted family contact, your carrier’s official support number and key account recovery steps on paper. A charged compact phone backup battery can help keep a compatible handset running while you seek help, but it cannot restore a stolen number. If service is lost, use a safe alternative connection or another phone to contact the carrier.
Ask the carrier about a port freeze
A transfer PIN and a port-out lock are not always the same control. Some carriers offer a separate switch that must be lifted before the number can move. Ask whether a store visit or extra verification is required and how to recover access if you forget the PIN. Keep the answers with your emergency notes. The best protection is one you understand well enough to use without the help of an unexpected caller.
Review old numbers on accounts
A phone number you no longer control should not remain a recovery method for banking, email or social media. Check account settings after switching carriers or changing numbers. Remove obsolete numbers and confirm the new recovery method before signing out. A forgotten recovery field can undermine otherwise strong passwords. This check is especially important when a family plan changes ownership or a business phone becomes a personal number.
Practise the first call
If your phone suddenly loses service, use another trusted phone to reach the carrier. Tell the representative that you suspect an unauthorised SIM change or port request and ask them to secure the account. Record the time and case number. Then use a safe device to inspect email and financial accounts. Having the order written down can prevent confusion when you are under pressure.
Review financial alerts
Turn on bank and card alerts that reach more than one trusted channel where possible. Check transactions after any suspected number theft. Contact the bank directly if something looks wrong. Do not transfer funds to a supposed safe account because a caller tells you to. Verify the issue through a number on your statement.
Protect shopping accounts too
Saved cards and addresses can be exposed when a shopping login is taken over. The online shopping scam checklist covers fake stores and urgent payment messages, which may arrive alongside a phone scam. Review saved payment methods and recent orders. Use the merchant’s official site rather than an email link for account changes.
Know what to do if it happens
Contact the carrier immediately to recover the number and secure the account. Then change important passwords from a trusted device, review email recovery settings and inspect financial activity. Document times and support case numbers. If identity information was exposed, use the official reporting and recovery channels.
Check family numbers
A shared mobile plan may have one account owner with broad transfer rights. Make sure that person understands the protections and that other family members know whom to call. Teenagers and older relatives may be targeted through different stories. A short family practice conversation is more useful than a long list nobody reads.
Build protection that lasts
Review the carrier lock once a year or whenever you change phones. Keep recovery codes current and remove old devices from important accounts. A stolen number is serious, but strong account security can stop one failure from becoming a chain of takeovers. The aim is to limit what any single key can open.
