SIM swap: كيف يعمل وعلامات التحذير وماذا تفعل
Identity theft · alto
The scammer gathers the victim's personal data (name, address, last SSN digits, date of birth) from breaches, phishing or social media. They then persuade the carrier, by phone, in store or chat, to move the number to a SIM or eSIM they control, or port it to another carrier. Sometimes a bribed employee helps.
The victim's phone suddenly loses service. Meanwhile, the criminal uses the number to receive verification codes and reset email, bank and crypto exchange passwords.
In Brazil, the scam happens through fake replacement-SIM requests and makes it easier to access banking apps and WhatsApp.
Sinais / Signs
- Phone suddenly shows "no service" or "SOS only"
- Carrier notice of a SIM change or port-out you did not request
- Password-reset alerts across several services
- You can no longer access email or your banking app
Prevenção / Prevention
- Set an account PIN/passcode and port-out lock with your carrier
- Replace SMS with an authenticator app or passkey on key accounts
- Do not post your phone, birth date and address online
- Keep significant crypto in wallets whose security does not depend on your number
- Turn on WhatsApp two-step verification
O que fazer / What to do
- Call your carrier from another phone and ask to reverse the change
- Change passwords on your main email and banks and review recovery methods
- Alert banks and exchanges to block transactions
- Report to IC3 and, if your data was misused, IdentityTheft.gov (US); in Brazil, file a police report and complain to the carrier/Anatel
FAQ
Is an eSIM safer than a physical SIM?
Not necessarily. The attack targets the carrier and account, not the chip. What protects you is a carrier PIN and not relying on SMS.
How do I tell it apart from a network outage?
If others nearby on the same carrier have service and you do not, call your carrier immediately.
FBI IC3 - Internet Crime Complaint Center · FTC - IdentityTheft.gov · FTC - ReportFraud · CERT.br