A SIM card stores your mobile identity, either as a physical card or a built-in eSIM which uses a chip embedded in your device to store information.

In a SIM swap, cybercriminals trick your mobile carrier into transferring your phone number to their device. Once they control your number, they can intercept calls and texts and potentially gain access to your accounts.

How cybercriminals use SIM swapping:

• Impersonation: They contact your carrier to move your number to a new SIM card, often using social engineering methods such as vishing.
• Code hijacking: They intercept password reset requests or multi-factor authentication codes.
• Data mining: They use personal information from social media to pass security checks.

Be proactive:

• Lock your SIM: Check with your mobile carrier about port-out and SIM protection features.
• Enable alerts with your mobile carrier: Get notified of any account changes.
• Verify changes: If you notice unauthorized changes, contact your mobile carrier using a trusted phone number.
• Strengthen account security: Use unique passwords with at least 12 characters, multi-factor authentication and biometrics.
• Limit sharing: Use privacy settings on social media to limit the information you share.

If you think you may have been targeted, act fast:

• Document everything: Capture details about what happened, including dates, times and any suspicious activity.
• Call your bank: Freeze affected accounts and notify credit bureaus.
• Change your passwords: Use strong passphrases with at least 12 characters.
• Report the incident: Follow local laws and organizational guidelines.