Phone Scam Prevention

SIM Swap Scam: How to Protect Your Phone Number Before It’s Hijacked

A SIM swap scam lets criminals take control of your phone number — which can unlock your email, bank accounts, and crypto wallets. Learn how this scam works and how to stop it before it happens.

High-risk identity takeover scam
Important: If a scammer controls your phone number, they can reset passwords, intercept verification codes, and take over your accounts — even without your password.
What is a SIM swap scam?
Also called phone number hijacking or SIM hijacking.

A SIM swap scam happens when a criminal convinces your mobile carrier to transfer your phone number to a new SIM card that they control. Once that happens, your phone loses service — and the scammer starts receiving your calls and text messages.

This gives them access to one-time passcodes (OTP), multi-factor authentication (MFA) codes, and password reset links sent to your phone.

How SIM swap scams work
  • The scammer gathers your personal information (data breaches, phishing, social media).
  • They contact your mobile carrier pretending to be you.
  • They request a SIM card transfer or phone upgrade.
  • Your phone suddenly loses service.
  • The scammer receives your texts and calls.
  • They reset your email, bank, or crypto accounts using SMS codes.
Warning signs of a SIM swap attack
  • Your phone suddenly shows “No Service” or loses signal unexpectedly.
  • You stop receiving calls or text messages.
  • You receive alerts about password changes you didn’t request.
  • Your accounts are locked or accessed without your permission.
How to protect yourself BEFORE it happens
These steps significantly reduce your risk.
  • Set a PIN or passcode with your mobile carrier (critical step).
  • Enable account security or “port-out protection” with your carrier.
  • Use an authenticator app instead of SMS for MFA when possible.
  • Protect your email account with a strong unique password and MFA.
  • Limit personal information shared on social media.
  • Be cautious of phishing emails or texts asking for personal details.
  • Use a password manager to create and store strong passwords.
What NOT to do
  • Do not rely only on SMS-based security.
  • Do not share personal details with unknown callers or messages.
  • Do not ignore sudden loss of phone service.
Related scam prevention guides
Want to protect your accounts even further?
Start training and learn how scammers combine phone, email, and text attacks.