SIM Swap Scam: How It Works, Warning Signs & What To Do
Phone number hijacking to bypass two-factor authentication and take over accounts.
SIM swap scams involve criminals taking control of your mobile phone number by convincing your carrier to transfer it to a SIM card they control. Once they have your number, they can intercept text messages used for two-factor authentication, allowing them to access your email, banking, cryptocurrency, and social media accounts. Scammers typically obtain enough personal information through phishing, data breaches, or social engineering to convince carrier employees they are you. In some cases, insiders at carriers are bribed to facilitate the swap. The FBI IC3 reported 971 SIM swap complaints with $17.4 million in losses in 2025.
How It Works
- 1Scammer gathers your personal information through phishing, data breaches, or social media
- 2Calls your mobile carrier posing as you, or bribes a carrier insider
- 3Convinces carrier to transfer your phone number to a SIM card they control
- 4Your phone suddenly loses service; their phone starts receiving your calls and texts
- 5Uses text message codes to reset passwords on your email and financial accounts
- 6Accesses cryptocurrency wallets, bank accounts, and other services
- 7Drains accounts before you realize what happened
Warning Signs (Red Flags)
- Your phone suddenly loses service or shows 'SIM not provisioned' error
- You receive notifications about SIM card changes you didn't make
- Unable to make calls or send texts without warning
- Receive password reset emails or 2FA codes you didn't request
- Locked out of email, banking, or cryptocurrency accounts
- Unauthorized transactions appear in your accounts
What To Do If Targeted
- Contact your mobile carrier immediately to report the unauthorized SIM swap
- Contact your bank and cryptocurrency exchanges to freeze accounts
- Change passwords on all critical accounts, especially email and financial services
- Enable non-SMS two-factor authentication (authenticator apps or hardware keys)
- Place a security freeze on your credit reports with major bureaus
- Report to FBI IC3 at https://www.ic3.gov
- Report to FTC at https://reportfraud.ftc.gov
- Contact local police to file a report
Real Cases
SEC X Account Hijack
Official ActionEric Council Jr. of Alabama was sentenced to 14 months in prison after pleading guilty to using a fake ID to SIM-swap a victim's phone number. Co-conspirators then took over the @SECGov X account and posted a fake announcement that Bitcoin ETFs had been approved. Bitcoin's price rose more than $1,000 before the SEC corrected the post, then fell more than $2,000. Council was paid about $50,000 in bitcoin for his role.
View Official SourceFrequently Asked Questions
How can I protect myself from SIM swap attacks?
Use non-SMS two-factor authentication whenever possible, such as authenticator apps (Google Authenticator, Authy) or hardware keys (YubiKey). Set up a PIN or password with your mobile carrier that's required for account changes. Limit personal information shared on social media. Use unique, strong passwords for all accounts, especially email. Consider using a separate phone number for sensitive accounts.
Will my mobile carrier compensate me for losses from a SIM swap?
Carrier liability varies and is often limited. Most carriers have terms of service that limit their responsibility for unauthorized account changes. However, if an insider was involved or the carrier failed to follow proper verification procedures, you may have a legal claim. Document everything and consult with an attorney experienced in consumer protection or cybercrime.
How quickly do SIM swap attacks happen?
Very quickly—often within minutes. Once your number is transferred, attackers can intercept 2FA codes immediately. This is why sudden loss of cell service should be treated as an emergency. Contact your carrier immediately, even before you confirm accounts are compromised.
See a Scam? Report It
Report suspected scams to law enforcement to help protect others and aid investigations.