SIM swap fraud occurs when a criminal illegally transfers your mobile number to a new SIM card. This gives them access to all OTPs and authentication codes linked to your phone number. This allows them to bypass two-factor authentication and take over your banking, email, and social media accounts.
What Is SIM Swap Fraud?
SIM swap fraud — also called SIM hijacking — happens when an attacker impersonates you with your mobile carrier. They then convince the carrier to port your number to a new SIM card. Once they have your number, every OTP goes directly to the attacker. This includes OTPs for net banking and UPI. This is one of the most dangerous forms of identity theft because it defeats SMS-based two-factor authentication.
How Does SIM Swap Fraud Work?
Step 1: Attacker Collects Your Personal Data
Fraudsters gather your name, address, date of birth, and phone number. They collect this from social media profiles, data breaches, or phishing attacks. Fraudsters use this data to impersonate you convincingly.
Step 2: Attacker Contacts Your Mobile Carrier
Next, the fraudster calls or visits a store of your mobile carrier, pretending to be you. They claim to have lost their SIM card or need an upgrade. They then request a port of your number to a new SIM they purchased.
Step 3: Your Number Is Transferred
Subsequently, if the carrier’s verification is insufficient, the carrier approves the port. Your existing SIM goes dead. Consequently, all calls, SMS, and OTPs go directly to the attacker’s device.
Step 4: Account Takeover Begins
Finally, with your mobile number, the attacker resets passwords for your bank accounts, email, and social media. They do this using OTP-based recovery. They can drain accounts and lock you out within minutes.
How to Identify a SIM Swap Attack?
- Your phone suddenly has no signal — Loss of network coverage without explanation is the most critical warning sign. This means someone deactivated your SIM.
- You receive an alert from your carrier — A notification that your carrier activated your number on a new device confirms a swap occurred.
- You cannot log into your banking or email accounts — This indicates your credentials have already been reset using your compromised number.
SIM Swap Fraud Prevention Tips
- First, set a difficult-to-guess PIN with your carrier — Most operators allow you to add a SIM lock or account PIN. Avoid using your date of birth or last four digits of your Aadhaar.
- Additionally, use an authenticator app instead of SMS for 2FA — App-based authentication (Google Authenticator, Microsoft Authenticator) is immune to SIM swap because it does not rely on your phone number.
- Furthermore, limit personal information online — Reduce publicly visible personal details on social media, particularly your phone number, date of birth, and address.
- Also, monitor your phone’s signal regularly — If your phone loses signal unexpectedly, contact your carrier immediately.
- Moreover, contact your carrier immediately if targeted — Call your operator’s fraud helpline to reverse the port and freeze your account.
- Freeze your bank accounts immediately — If you suspect a SIM swap is in progress, call your bank to put a hold on all outgoing transfers. Also review if your phone has been cloned alongside a SIM swap attack.
How to Report SIM Swap Fraud in India?
- Call the National Cyber Crime Helpline: 1930
- File a complaint at cybercrime.gov.in
- Contact TRAI if your carrier fails to respond promptly
- Lodge an FIR at your nearest cyber crime police station
If you are a victim of SIM swap fraud, contact cyber expert Anuraag Singh immediately for account recovery assistance and digital forensic investigation.
