Your mobile number may do more than handle calls and texts. Many online services use phone numbers for account recovery, identity checks, and text-message authentication. That makes control of your mobile number an important part of your overall account security.
SIM swap fraud occurs when someone improperly causes a person’s mobile service to be transferred to another SIM or device, allowing the other party to receive calls or text messages intended for that number. A related port-out scam involves transferring the number to a different carrier without the subscriber’s authorization.
These incidents deserve prompt attention, but an unexpected loss of cellular service does not automatically mean a SIM swap has occurred. Network outages, billing issues, phone settings, damaged SIMs, eSIM problems, and ordinary carrier maintenance can cause similar symptoms. This guide explains how to recognize the difference, improve SIM swap protection, and respond safely if you suspect your number was transferred without permission.
Quick Takeaways
- SIM swap fraud involves an unauthorized transfer or activation of your mobile number on another SIM, eSIM, or device.
- A port-out scam generally involves an unauthorized transfer of your number to another carrier.
- Suddenly losing cellular service can be a warning sign, but by itself it is not proof of fraud.
- Protect your mobile carrier account with a unique password, a carrier account PIN or passcode, and stronger authentication when available.
- Enable your carrier’s number lock, port-out protection, SIM-change protection, or equivalent feature if it offers one.
- For high-value accounts, consider an authenticator app, passkey, or FIDO security key instead of relying exclusively on SMS authentication.
- If you suspect an unauthorized transfer, contact your carrier promptly from another phone or over trusted internet access, then review important email and financial accounts.
- For possible identity theft in the US, the FTC provides official recovery resources at IdentityTheft.gov.
What Is SIM Swap Fraud?
A SIM—short for Subscriber Identity Module—helps a cellular network associate a mobile subscription with an authorized device. Traditional SIM cards are small physical chips. Modern phones may instead use an eSIM, which performs the subscriber-identity function digitally.
A legitimate SIM change happens routinely. For example, you might activate a new iPhone, replace a damaged Android phone, or ask your carrier to move your line to an eSIM.
In SIM swap fraud, someone causes that change without the legitimate subscriber’s authorization.
If successful, calls and SMS messages for the victim’s number may begin arriving on a device controlled by the unauthorized party. The legitimate subscriber’s old SIM or eSIM may stop receiving normal cellular service.
The security concern is not simply that someone can receive telephone calls. A phone number may also be used for:
- SMS two-factor authentication
- Password-reset verification
- Account-recovery messages
- Financial security alerts
- Email verification
- Messaging applications
- Other services tied to a telephone number
This is why securing your carrier account can be as important as securing other major online accounts.
SIM Swap vs. Port-Out Scam: What’s the Difference?
The terms are sometimes used interchangeably, but there is a practical distinction.
| Situation | What generally happens | Possible symptom |
|---|---|---|
| SIM/eSIM change | Number is activated on another SIM or device | Existing phone unexpectedly loses cellular service |
| Unauthorized SIM swap | Someone causes a SIM/eSIM change without your authorization | Loss of service plus unexpected account or carrier activity |
| Port-out scam | Number is transferred to another carrier without authorization | Original carrier service may stop |
| Ordinary outage | Carrier/network has a technical problem | Calls/data fail, potentially affecting other customers too |
| Phone/SIM problem | Device configuration, hardware, or SIM has an issue | Service may fail without account changes |
From the subscriber’s perspective, the immediate response to a suspected unauthorized SIM change and an unauthorized port is similar: verify what happened directly with your carrier.
What SIM Swap Fraud Does—and Does Not—Mean
A SIM swap does not automatically give someone all the information stored on your physical phone.
Your photos, locally stored files, phone passcode, and applications do not magically transfer to another device because your number was moved.
What may transfer is control of cellular service associated with the number. That can be important because some online services treat possession of that number as evidence of identity.
Likewise, a SIM swap does not inherently reveal your account passwords. Additional account access generally depends on how those accounts are configured and what other information is available.
This distinction matters because recovery should focus on the services that may actually be affected rather than assuming every device and account has been compromised.
Why SIM Swaps Can Affect Online Accounts
Consider a hypothetical email account that has a strong password but uses a mobile number as its password-recovery method.
Someone who controls the number might be able to receive an SMS recovery code if the email provider permits recovery by text and other security checks are satisfied.
The same principle can apply to other services.
Modern providers use additional risk checks, authentication factors, waiting periods, passkeys, trusted devices, and other safeguards, so possession of a phone number does not necessarily mean someone can reset every account.
Still, reducing your reliance on SMS for particularly important accounts can limit the consequences if control of your number changes.
SIM Swap Warning Signs
No single symptom proves that a SIM swap has happened. Look for a combination of signals and verify them directly with your carrier.
1. Your phone unexpectedly loses cellular service
Your status bar may show:
- SOS or Emergency Calls Only
- No Service
- No SIM
- An inactive eSIM
- A persistent failure to connect to your carrier
This is one of the commonly reported warning signs, but ordinary network and device problems can cause exactly the same behavior.
If practical, check whether another person using the same carrier nearby also has service.
2. Your carrier reports a SIM or eSIM change you did not request
An unexpected notification about a new SIM, eSIM activation, device activation, or line change deserves attention.
Do not use a link or phone number from a message you do not trust. Open the carrier’s known official app or website yourself, or call its verified support number from another device.
3. You receive a number-transfer or port-out notice
Carriers may send alerts when a number transfer is requested or completed.
If you did not request one, contact the carrier through an independent, official channel.
4. Your carrier account password or PIN stops working
This can have innocent explanations, but combined with an unexpected loss of service or carrier alerts, it may justify prompt investigation.
Use the carrier’s legitimate recovery process rather than repeatedly guessing credentials.
5. You stop receiving expected SMS authentication codes
This can happen for many reasons, including network delays and service-specific problems.
If it occurs at the same time as unexplained cellular-service loss, check your mobile account.
6. Other account security alerts appear
You might see notifications of password resets or sign-in attempts on email, financial, social, or other accounts.
Again, an attempted reset does not necessarily mean the attempt succeeded. Check the affected service directly rather than acting through the notification.
What Is Not Proof of a SIM Swap?
Several common situations are sometimes mistaken for SIM swap fraud.
A brief outage, “SOS” message, delayed text, dropped call, poor reception, or authentication code arriving late does not establish that your number was stolen.
Neither does an unfamiliar spam call.
Even receiving a carrier-branded message about a SIM problem should not be treated as proof, because deceptive messages can imitate carrier communications.
Verification is straightforward: contact your carrier through an official channel and ask whether any SIM, eSIM, device, or number-transfer changes were recently made to your line.
How to Protect Yourself From SIM Swap Fraud
You cannot control every part of a carrier’s systems, but several consumer settings can improve protection.
1. Secure your carrier account with a unique password
Your mobile carrier account should have its own password.
Do not reuse your:
- Email password
- Apple Account password
- Google Account password
- Banking password
- Password-manager main password
- Social media password
A password manager can generate and store a long random credential for the carrier account.
If one unrelated service ever exposes your password, password uniqueness prevents that credential from directly matching your mobile account.
2. Create a Carrier Account PIN or Passcode
Many US carriers support an account PIN, security PIN, passcode, or similar credential.
This can be separate from your online account password and may be required for certain account changes.
To set one up:
- Open your carrier’s official app or manually navigate to its official website.
- Sign into your account.
- Find Security, Profile, Account Settings, or similar options.
- Look for PIN, account passcode, security code, or related terminology.
- Choose a code that is not easy to associate with you.
- Store it securely if necessary.
Avoid using your birthday, address, repeated digits, or the last digits of your phone number when the carrier permits stronger choices.
Carrier processes change, so follow the requirements displayed by your provider.
3. Turn On Number Lock or Port-Out Protection
A number lock is intended to add resistance against transferring a line or making certain account changes until the lock is removed through an authorized process.
US carriers use different names for these features.
Depending on your provider, you may encounter terms such as:
- Number Lock
- Number Transfer Lock
- Port Protection
- Port-Out Protection
- Account Takeover Protection
- SIM Protection
- Transfer Protection
Availability can depend on your carrier, account type, plan, and whether the line is consumer or business service.
How to find it safely
Sign into your carrier’s official app or website and search its settings or support documentation for number transfer, port protection, SIM protection, or number lock.
Enable the protection available to you after reading how it works.
Do not rely on an unsolicited text offering to “activate SIM protection.” Open the account independently instead.
4. Enable Strong Authentication on the Carrier Account
If your carrier supports MFA or another additional sign-in method, enable it.
The ideal option is one that does not rely solely on the same phone number the account controls. Available carrier authentication methods vary.
CISA recommends phishing-resistant MFA, such as FIDO-based authentication, when providers offer it and it is practical.
Not every carrier account supports the same choices. Use the strongest practical method offered to you and keep recovery information current.
5. Reduce Reliance on SMS for Critical Accounts
SMS authentication is useful, and for many accounts it provides substantially more protection than using only a password.
However, SMS depends partly on control of your mobile number. That makes it less resistant to SIM-related attacks than authentication mechanisms that do not rely on the cellular number.
For important accounts, consider stronger options when supported:
| Authentication method | Depends on phone number? | Practical notes |
|---|---|---|
| SMS verification | Yes | Better than password-only in many situations, but SIM-dependent |
| Authenticator app | Usually no for generating codes | Useful option; plan recovery before losing phone |
| Push authentication | Depends on account/device design | Only approve requests you initiate |
| FIDO security key | No | Strong phishing-resistant option |
| Passkey | No SMS required for normal authentication | Strong, generally phishing-resistant |
| Recovery code | No | Store securely; intended for recovery |
Do not disable an existing SMS authentication method until a replacement is configured and tested. Locking yourself out of an important account does not improve your security.
6. Protect Your Primary Email Account
Your email account may be more important to recovery than your telephone number.
Many services send password resets, security alerts, and recovery links through email. Use a unique password or passkey for your primary email, and enable strong MFA.
Review:
- Recovery email
- Recovery phone number
- Signed-in devices
- Passkeys/security keys
- Authenticator methods
- Connected applications
- Email forwarding and rules
If your phone number is the only way to recover your email, consider adding another secure provider-supported recovery method where available.
7. Secure Your Apple, Google, and Microsoft Accounts
These accounts can control cloud data, device backups, password managers, passkeys, email, and account recovery.
iPhone and Apple Account
On iPhone, search Settings for Sign-In & Security under your Apple Account.
Review trusted phone numbers, trusted devices, two-factor authentication, and available recovery options.
Apple may use trusted phone numbers as part of account security, but trusted Apple devices and other recovery mechanisms can also play important roles.
Android and Google Account
On Android, search Settings for Google Account, then review Security.
Check 2-Step Verification, passkeys, security keys, recovery options, recent security activity, and signed-in devices.
Windows/Microsoft
On Windows, use the Microsoft Account’s official online Security settings to review authentication methods, recovery information, and activity.
Device menus and account features change over time. Use Settings search or current provider documentation rather than relying solely on an older fixed menu path.
8. Be Careful With Information Requested by Unexpected Callers
A person claiming to represent your mobile carrier may ask for information supposedly needed to “secure your SIM” or “stop a port.”
Do not provide passwords, one-time codes, account recovery codes, or authentication approvals to an unexpected caller.
Instead:
- End the call.
- Open your carrier’s official application or website.
- Use the support contact listed there.
- Ask whether there is actually a problem with your account.
Caller ID can be spoofed, so seeing your carrier’s name on the incoming-call display is not sufficient verification.
9. Keep Carrier Security Notifications Enabled
If your carrier lets you receive alerts for:
- Password changes
- PIN changes
- SIM/eSIM changes
- New device activations
- Number-transfer requests
- Profile changes
consider keeping those alerts enabled.
A notification cannot prevent every unauthorized action, but it may give you earlier visibility into a change you did not request.
Be careful with the notification itself. If anything looks unusual, navigate independently to your account rather than clicking a link in the message.
10. Minimize Unnecessary Public Personal Information
You do not need to disappear from the internet to improve security.
It is nevertheless sensible to avoid unnecessarily publishing information commonly associated with account verification, such as a personal phone number, full birth date, home address, or other account-specific details.
Privacy alone cannot prevent a SIM swap. Personal information can come from many sources, including records, data brokers, previous data exposures, or social interactions.
Treat reduced public exposure as one defensive layer, not a guarantee.
SIM Swap Protection at Major US Carriers
The largest US mobile carriers provide account-security and number-transfer controls, but product names and processes change.
Verizon
Verizon has provided Number Lock and other account-security tools designed to protect against unauthorized number transfers.
Use the official My Verizon app or Verizon website and search current account settings for Number Lock or number transfer security.
AT&T
AT&T provides account-security controls and has implemented protection related to unauthorized SIM and number-transfer activity.
Use the official myAT&T app or AT&T website and search its current security documentation for wireless account security, SIM protection, or number transfer options.
T-Mobile
T-Mobile offers account security features that may include SIM Protection, Account Takeover Protection, or related controls depending on your plan and current service options.
Use the official T-Mobile app or website to identify the protections currently available for your line.
Other carriers and MVNOs
If you use another carrier, including an MVNO, contact it through its official support resources and ask what safeguards are available for:
- Unauthorized SIM changes
- eSIM changes
- Number transfers
- Port-outs
- Carrier-account takeover
Do not assume smaller carriers use the same feature names as the major networks.
Step-by-Step SIM Swap Recovery Steps
If you suspect your number has been transferred or reassigned without permission, the first goal is to verify the carrier account and restore control of your number.
Step 1: Check whether there may be an ordinary outage
If possible, use Wi-Fi and check your carrier’s official status information. Ask another person on the same network whether they have service.
Restarting the phone once can also resolve some routine cellular issues.
If you received an unexpected SIM, eSIM, or transfer notification—or account activity accompanies the service loss—move quickly to the next step.
Step 2: Contact your carrier from another connection
If your cellular line no longer works, use:
- Another phone
- Your carrier’s official website over trusted Wi-Fi
- The carrier’s legitimate chat feature
- An authorized retail store if necessary
Tell the carrier you are concerned that an unauthorized SIM/eSIM change or number transfer may have occurred.
Ask it to verify the line’s current status and recent changes.
Step 3: Recover and secure the carrier account
Follow the carrier’s authorized identity-verification procedure.
Once control is restored:
- Change the carrier-account password.
- Reset the carrier PIN/passcode if appropriate.
- Turn on available number-transfer protection.
- Review authorized users on family accounts.
- Confirm recovery and contact information.
- Review recent line or device changes.
Do not ask a third-party “recovery expert” to bypass the carrier’s process.
Step 4: Secure your primary email
From a trusted device, review your primary email account.
If circumstances indicate possible unauthorized access, change its password to a unique credential or use the provider’s secure passkey options.
Review active sessions, recovery methods, 2FA, forwarding rules, filters, and connected applications.
Step 5: Review important accounts tied to your number
Focus on accounts that use the affected phone number for login or recovery.
Prioritize:
- Primary email
- Password manager
- Apple/Google/Microsoft account
- Financial and payment accounts
- Other important services using SMS recovery
- Social media and messaging accounts
Look for security notifications or changes you did not make.
Step 6: Replace exposed or reused passwords
If there is evidence an account password was exposed, replace it.
If the same password was reused elsewhere, change those accounts to unique credentials too.
Do not change every unrelated, already-unique password unless circumstances or the provider’s guidance justify it.
Step 7: Replace SMS authentication where appropriate
After restoring access, consider moving critical accounts to stronger authentication methods such as passkeys, security keys, or authenticator apps where supported.
Keep adequate backup and recovery methods so losing one device does not lock you out.
Step 8: Review financial activity
If the number was linked to financial services, review those accounts directly.
If you notice transactions or account changes you do not recognize, contact the financial institution through the official app or the phone number printed on your card or statement.
Do not call a number supplied in an unexpected security message.
Step 9: Document relevant information
If you confirmed an unauthorized carrier change, save useful records such as:
- Carrier case or ticket numbers
- Dates and approximate times
- Relevant carrier notifications
- Account security alerts
- Communications from affected service providers
Avoid publicly posting screenshots that reveal account numbers, phone numbers, codes, or other sensitive information.
Documentation can be useful if a provider, financial institution, insurer, or law-enforcement agency later requests details.
Should You Change Your Phone Number After a SIM Swap?
Not necessarily.
A confirmed unauthorized SIM transfer does not automatically mean your telephone number can never be used safely again. Restoring the line, strengthening the carrier account, and improving authentication on connected accounts may be sufficient.
Changing a long-established phone number also creates practical complications because it may be used by employers, family members, medical offices, account recovery systems, and other services.
If repeated unauthorized transfer attempts continue despite carrier protections, discuss options with the carrier’s security or fraud department.
Do eSIMs Prevent SIM Swap Fraud?
No.
An eSIM eliminates the need to physically swap a small plastic card, but SIM swap fraud is fundamentally an account and carrier authorization problem, not just a physical-card problem.
A fraudulent eSIM reassignment can potentially create the same outcome if a carrier’s account controls are improperly bypassed or abused.
eSIMs do provide security and convenience benefits in various contexts, but they should not be treated as complete SIM swap protection.
Is SMS Two-Factor Authentication Unsafe?
“Unsafe” is too broad.
SMS 2FA has known weaknesses, including its reliance on control of a telephone number. NIST’s current authentication guidance treats use of the public switched telephone network as a restricted authenticator mechanism and identifies risks associated with number reassignment and related attacks.
At the same time, SMS 2FA can still improve protection compared with a password alone, particularly when stronger options are unavailable.
For important accounts, CISA encourages phishing-resistant authentication where possible. Passkeys and FIDO security keys do not depend on receiving a text message and also provide strong resistance to conventional phishing.
The sensible migration path is to configure and test the stronger method before removing your existing recovery option.
Common Mistakes to Avoid
Do not assume every unexpected loss of cell service is SIM swap fraud. Check ordinary network and device explanations while promptly contacting your carrier when circumstances are suspicious.
Do not respond to a supposed SIM-swap alert by giving an unexpected caller or texter your carrier PIN, password, or authentication code. Verify the situation through your carrier independently.
Avoid using the same password for your mobile carrier and email accounts. Unique passwords limit the impact of one credential exposure.
Do not depend exclusively on SMS authentication for every important account when stronger methods are available and practical.
Do not disable SMS or another recovery method before confirming that your replacement authentication method works.
Avoid using easy-to-guess carrier PINs based on birthdays, phone-number digits, or simple sequences.
Do not assume your physical phone must be compromised because your number was transferred. Account-level and carrier-level incidents can occur without malware on the phone.
Finally, do not pay someone who claims they can secretly “reverse hack” the person responsible or recover your line by bypassing the carrier. Use authorized provider recovery procedures.
What to Do Before Replacing Your Phone
Phone replacement is a good time to review SIM security because legitimate eSIM and SIM transfers are often part of the process.
Before erasing your old phone:
- Confirm you can access your carrier account.
- Verify your carrier password and PIN.
- Review your account’s number-transfer protections.
- Understand the carrier’s legitimate SIM/eSIM migration process.
- Confirm you can access your important email account.
- Check backup authentication for accounts tied to your old phone.
- Transfer authenticator apps or passkeys using their supported procedures.
- Confirm the new phone is receiving calls and messages correctly.
- Only then erase the old phone according to the manufacturer’s instructions.
This prevents an ordinary phone upgrade from becoming an account-recovery problem.
FAQ
What is SIM swap fraud in simple terms?
SIM swap fraud occurs when someone improperly causes your mobile number to be activated on a SIM, eSIM, or device they control.
Your original phone may then lose cellular service, while calls and texts intended for your number may reach the other device.
What is the difference between SIM swapping and a port-out scam?
A SIM swap typically refers to changing which SIM or device controls a number. A port-out scam involves transferring the telephone number to another carrier without authorization.
Both can result in the legitimate subscriber losing control of the number.
Does “SOS Only” mean my SIM was swapped?
No. “SOS,” “Emergency Calls Only,” or “No Service” can result from outages, poor coverage, account problems, SIM/eSIM issues, or other technical causes.
If the service loss is unexplained and is accompanied by carrier-account changes or transfer alerts, contact your carrier through an official channel.
Can a SIM swap bypass two-factor authentication?
A successful unauthorized transfer can potentially allow another device to receive SMS codes sent to that number. It does not automatically bypass every form of 2FA.
Authenticator apps, passkeys, and FIDO security keys generally do not depend on the mobile number in the same way.
Will a carrier account PIN prevent every SIM swap?
No security control provides a guarantee. A carrier PIN or passcode adds an important layer, but overall security depends on the carrier’s processes and your other account protections.
Combine the PIN with a unique password, number-transfer protection, account alerts, and strong authentication where available.
Does an eSIM protect me from SIM swapping?
Not completely. eSIMs remove the physical card, but an unauthorized account-level eSIM transfer can still create a SIM-swap-like outcome.
Protect the carrier account and number-transfer process regardless of whether you use a physical SIM or eSIM.
Should I stop using SMS 2FA?
Not necessarily. SMS authentication often provides more protection than a password alone.
For critical accounts, stronger methods such as passkeys, FIDO security keys, or authenticator apps may be preferable when supported. Configure and test replacements before removing working security methods.
How quickly should I contact my carrier if I suspect a SIM swap?
Promptly, particularly if you have both unexplained cellular-service loss and notifications about an unauthorized SIM, eSIM, or number transfer.
Use another phone, trusted internet connection, or an authorized carrier store if your line is unavailable.
Can a SIM swap expose everything stored on my phone?
No. Reassigning a number does not automatically copy the contents of your physical phone.
The main risk involves control of calls, SMS messages, and online accounts that rely on the affected number for authentication or recovery.
Should I get a new phone after a SIM swap?
Usually, a new physical phone is not automatically necessary solely because of an unauthorized number transfer.
If you separately suspect a device-security issue, use the manufacturer’s official security and support processes to evaluate that concern.
When to Get Extra Help
Contact your mobile carrier’s security, account-recovery, or fraud department through an official channel if you confirm or strongly suspect an unauthorized SIM/eSIM change or number transfer. Ask the carrier to restore the line and review recent account changes.
If unauthorized activity affects a bank, credit union, card, brokerage, or payment account, contact that institution promptly using its official app, website, statement, or the trusted number printed on your card. This guide is general cybersecurity information and is not financial advice.
If personal information appears to be used for identity theft, US consumers can use the Federal Trade Commission’s IdentityTheft.gov website for official general information and a personalized recovery plan. Depending on your situation, the FTC may also provide information about fraud alerts, credit freezes, and reporting.
If the incident involves credible threats, stalking, harassment, or other personal-safety concerns, consider specialized safety resources and appropriate local authorities. Changes to shared phone plans or account security can sometimes be visible to another authorized account user, which may matter in sensitive situations. Contact emergency services if there is immediate danger.
Conclusion: SIM Swap Protection Checklist
Your phone number is part of your digital identity because so many services still use it to communicate, authenticate, or recover accounts. Protecting the carrier account behind that number can therefore prevent one problem from spreading.
Use this short checklist:
- Give your carrier account a unique password.
- Set a strong carrier account PIN or passcode.
- Enable number lock, port-out protection, or equivalent controls where available.
- Turn on useful carrier security notifications.
- Secure your primary email account.
- Use passkeys, security keys, or authenticator apps for important accounts where practical.
- Keep account-recovery methods current.
- Never give unexpected callers your carrier PIN or verification codes.
- Treat unexplained service loss plus unexpected account changes as a reason to contact your carrier promptly.
- Know the SIM swap recovery steps before an urgent situation occurs.
SIM swap protection is not about abandoning your phone number or assuming every outage is fraud. It is about adding sensible safeguards around a number that many other services may trust.