SIM Swap Scams: How Criminals Hijack Your Phone Number (And How to Stop Them)

The short answer: A SIM swap scam happens when a criminal tricks your cell phone carrier into moving your phone number onto a SIM card they control. Once they have your number, they can receive your text message codes, reset your passwords, and break into your bank, email, and investment accounts — often within hours. You can prevent it by adding a PIN or passcode to your cell phone account, using an authenticator app instead of text codes where possible, and watching for one telltale warning sign: your phone suddenly loses all signal for no reason.

Last updated: 2026-07-12

What Is a SIM Swap Scam?

Every cell phone has a small chip inside it called a SIM card. That chip is what tells the phone network which phone number belongs to your device. When you get a new phone, the store "swaps" your number onto the new SIM card so your calls and texts follow you.

Criminals have learned to abuse this normal process. In a SIM swap scam, a stranger contacts your cell phone carrier — by phone, online chat, or sometimes in person — and pretends to be you. They report a "lost phone" or a "new device" and ask the carrier to move your number onto a SIM card they own.

If the carrier is fooled, your phone number now belongs to the criminal's device. Your own phone goes dead. No calls, no texts, no signal — because your number no longer lives there.

This matters more than it sounds like it should, because so many of your accounts are tied to that phone number.

Why a Stolen Phone Number Is So Dangerous

Think about how many places use your cell number as a safety check. Your bank sends a text code when you log in from a new device. Your email account texts you a code if it suspects unusual activity. Many services let you "forget" your password and reset it by texting a code to your phone.

All of that is designed to protect you — as long as your phone number stays in your hands.

Once a criminal controls your number, they can:

Reset your passwords. Most "forgot password" links offer to text a reset code. If they have your number, they get the code.
Receive your two-factor codes. The extra security step that's supposed to stop account takeovers instead hands them the key, because the code goes straight to their SIM card.
Lock you out while they work. Since your phone has no signal, you often don't realize anything is wrong until you try to make a call and it fails — by which point they may already be inside your bank account.

Criminals who go to the trouble of a SIM swap are usually after something specific: bank accounts, brokerage or retirement accounts, or email addresses that control other accounts. It is a more deliberate, targeted attack than a random phishing email, which is exactly why it deserves a guide of its own.

The One Warning Sign Almost Everyone Misses

Here is the detail that catches most people off guard: a SIM swap often shows no warning at all until your phone simply stops working.

You won't get a scary pop-up. You won't get a suspicious email, at least not at first. What you'll notice is:

Your phone shows "No Service" or "SOS Only" when it normally has full bars.
Calls won't go through, and text messages won't send or arrive.
You try to call your own phone from another line and it goes straight to voicemail or a strange message.

Most people assume this is a network glitch or a dead phone and wait it out. That delay is exactly what the criminal is counting on. If your phone suddenly loses all signal in a place where it normally works fine, treat it as a red flag — not an inconvenience. Call your carrier immediately from a different phone, or a family member's phone, and ask directly whether your number was recently transferred to a new SIM card.

How Criminals Set Up the Swap in the First Place

A SIM swap doesn't happen out of nowhere. Criminals usually gather personal information beforehand so they can convince your carrier they're really you. Common sources include:

Data breaches. Your name, address, date of birth, or even the last four digits of your Social Security number may already be sitting in a stolen data file from a company breach you never even heard about.
Phishing emails or texts. A message pretending to be your carrier, asking you to "verify your account," can hand over exactly what's needed.
Social media oversharing. A birthday, pet's name, or mother's maiden name posted publicly can answer a carrier's security questions.
A phone call pretending to be your carrier. Someone claims there's "a billing issue" or "a security alert" and asks you to confirm account details to "verify your identity."

The pattern is the same one behind most identity theft: the criminal collects small pieces of information from multiple places, then uses them together to impersonate you convincingly enough that a customer service rep believes them.

How to Protect Your Phone Number

The good news is that SIM swap scams are preventable with a few specific steps. None of them require technical skill — they just require making a phone call or a few taps in a settings menu.

1. Add a PIN or passcode to your cell phone account.

Call your carrier (Verizon, AT&T, T-Mobile, or whichever you use) and ask them to add a "port-out PIN" or account passcode. This means no one — including you — can move your number to a new SIM card without providing that PIN in person or verbally. This single step stops the vast majority of SIM swap attempts cold, because the criminal doesn't have the PIN.

2. Use an authenticator app instead of text codes where you can.

Text message codes are convenient, but they are exactly what a SIM swap is designed to intercept. An authenticator app (like Google Authenticator) generates codes directly on your phone's screen without using your cell signal at all — so even if your number gets swapped, the codes still only appear on your device. Not every account offers this option, but use it wherever your bank, email, or investment accounts allow it.

3. Don't overshare personal details online.

Skip posting your full birthday, hometown, or mother's maiden name on social media. These small details are exactly what criminals use to answer security questions when impersonating you to a carrier.

4. Be cautious with calls or texts claiming to be your carrier.

If you get a message asking you to "verify your account" or "confirm your identity," don't click the link or call the number in the message. Call your carrier directly using the number on your bill or the back of your phone.

5. Monitor your accounts for unexpected changes.

Getting an alert that your password was changed, or that a new device logged into your email, when you didn't do it, is often the first sign something is wrong. Catching it within minutes instead of days makes a real difference in how much a criminal can do.

A Tool That Watches for This Kind of Trouble

Setting a carrier PIN and switching to an authenticator app covers the prevention side. But identity theft protection services add a second layer: they watch for signs that your personal information is being used somewhere you didn't authorize, and they alert you fast if something looks wrong.

Aura monitors your identity, bank and credit accounts, and personal information for warning signs of exactly this kind of takeover attempt. If a criminal uses stolen personal details to open a new account, change a password, or access financial information in your name, Aura is built to catch it early and alert you — often before serious damage is done. It also includes credit monitoring and a fraud resolution team who can help you take action step by step if something does happen.

For seniors managing retirement accounts and long financial histories, that kind of early warning system can be the difference between catching a SIM swap attempt in its first hour and discovering it after money has already moved.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

What to Do If It's Already Happened to You

If your phone suddenly has no signal and you suspect a SIM swap, act quickly and in this order:

Call your carrier immediately from another phone. Ask them to confirm whether your number was recently transferred and, if so, to reverse it and lock the account with a PIN.
Contact your bank and any investment accounts right away. Ask them to flag your account for suspicious activity and change your online banking password from a device you know is secure.
Change your email password from a secure device, since email is often the key that unlocks everything else. If you can, add two-factor authentication using an authenticator app rather than text codes.
Check your accounts for unauthorized changes — new devices logged in, changed contact information, or unfamiliar transactions.
File a report with the FTC at IdentityTheft.gov and, if money was taken, file a report with your local police department and the FBI's Internet Crime Complaint Center (IC3.gov).

Acting within the first hour makes a real difference. Criminals who successfully complete a SIM swap usually move fast, so the faster you respond, the more damage you can prevent.

The Bottom Line

A SIM swap scam is quiet, fast, and relies on you not noticing your phone lost signal for a reason. The single most effective step you can take today is calling your cell carrier and adding a PIN or passcode to your account — it takes about five minutes and closes the door criminals rely on. Pair that with an authenticator app for your most important accounts, and you remove nearly all of the advantage a SIM swap scam depends on.

Want guides like this sent straight to your inbox? Sign up below for ClearShield's free weekly newsletter — practical, plain-English safety tips for you and your family, with no jargon and nothing to buy.