A SIM swap scam happens when a criminal tricks a mobile provider into moving your phone number onto a SIM or eSIM they control. Your calls and texts, including login codes, then go to them instead of you. The best protection is to add extra security to your provider account, move important logins away from text-message codes and know the warning signs, so you can act quickly if your service suddenly drops.
The short version
- The scam targets your phone number and your provider account, so it can happen with no access to your actual phone.
- Warning signs: service that drops and stays down, alerts about a SIM change you didn’t request, and sudden password reset emails.
- If you suspect a swap, contact your provider’s fraud team right away from another phone or a computer, then your bank.
- Ask your provider what extra account protection it offers, and use an authenticator app or passkey where you can.
- Never read a one-time code to anyone who calls or texts you.
How a SIM swap scam works
Moving a number to a new SIM is a normal service. Providers do it when someone loses a phone, upgrades or switches to an eSIM. The scam abuses that process. The criminal gathers personal details about you, often from phishing messages, data breaches or social media, then contacts the provider pretending to be you and asks for the number to be moved.
A close cousin is port-out fraud, where your number is transferred to a different provider rather than a new SIM with the same one. The effect is the same: someone else now receives your calls and texts.
Why your phone number is worth stealing
For many people, a phone number works like a master key. Banks, email services and social media often send login codes by text, and some let you reset a password using a text message. Someone holding your number may be able to:
- Receive the codes sent to confirm logins and payments
- Reset passwords on accounts linked to your number
- Message or call your contacts while posing as you
Your email account is often the biggest prize, because it can be used to reset the passwords for almost everything else.
Warning signs to watch for
- Your phone suddenly shows no service, “SOS” or a SIM error, and it doesn’t come back after a restart
- Your provider tells you about a SIM change, eSIM activation or account change you didn’t make
- You get emails about password resets or new sign-ins that you didn’t start
- Friends say your calls or texts seem odd, or you stop receiving texts
- You are suddenly locked out of your email, banking or social media accounts
One sign on its own isn’t proof. Outages and faulty SIMs can cause the same symptoms. Restart your phone, toggle airplane mode and ask whether anyone nearby on the same provider has service. If you still have no signal and you also see account alerts, treat it as urgent.
If there are no other red flags, our guide to a SIM card that isn’t detected covers the everyday causes.
What to do if you think it’s happening
Speed matters here, so work through these in order:
- Call your provider’s fraud or security team. Borrow a phone or use a computer, and get the contact details from the provider’s official website or a bill, not from a text you received. Explain that you suspect an unauthorized SIM change or transfer and ask them to secure the account.
- Call your bank and card issuers. Use the number on the back of your card. Tell them your phone number may be compromised and ask them to watch for unusual activity.
- Secure your email next. From a device you trust, change the password, sign out of other sessions, and check the recovery phone number, recovery email and any forwarding rules.
- Work through other important accounts. Check your Apple Account or Google Account, then social media and anything holding payment details. Change passwords and remove devices you don’t recognize.
- Keep records and report it. Note the times, names and reference numbers. Report the incident to your local police and the Canadian Anti-Fraud Centre (1-888-495-8501). You can also ask Equifax Canada and TransUnion Canada about placing a fraud alert on your credit file.
Our guide on how to tell if your phone has been hacked has more on checking your devices and accounts once your number is back under control.
How to protect your number before anything happens
Strengthen your provider account
- Use a long, unique password for your provider’s website or app, and turn on two-step verification if it’s offered.
- Ask your provider what extra protection is available, such as an account PIN or a block on SIM changes and transfers. Options differ between providers, so ask directly.
- Avoid a PIN or security answer that someone could guess from your social media, such as a birthday or pet’s name.
Rely less on text-message codes
- Where a service offers it, switch from text codes to an authenticator app, a passkey or a hardware security key. These aren’t tied to your phone number.
- Start with email, then your Apple Account or Google Account, then financial accounts.
- Save any recovery codes somewhere safe, away from your phone.
- Text codes are still better than no second step, so keep them on for any account that doesn’t offer an alternative.
Share less about yourself
Scammers build their story from small details. Consider keeping your full birthdate, phone number and home address off public profiles, and be wary of quizzes or forms that ask for them.
Don’t fall for the phone call or text
Some scams try to get you to help. A caller claiming to be from your provider or bank might say there is a problem with your account, then ask you to read out a code that just arrived. That code may be exactly what they need to finish taking over your account.
- Treat anyone who asks you to read out a one-time code as a scammer, whoever they say they are.
- If a call worries you, hang up and call back using the number on your bill or the official website.
- Don’t tap links in unexpected texts about a SIM upgrade or account problem.
- Never scan an eSIM QR code or approve an eSIM transfer you didn’t ask for.
Does a SIM PIN stop SIM swaps?
Not really, though it’s still useful. A SIM PIN stops someone from using your physical SIM in another phone if it’s stolen. It does nothing when a provider is tricked into activating a new SIM on its own systems, so it’s a separate layer of protection.
On an iPhone, look under Settings > Cellular > SIM PIN (tap your number first if you have more than one line). On Android, menus vary, so search for “SIM lock” or “SIM PIN” in Settings. Get your default PIN from your provider before you start, because too many wrong attempts can lock the SIM until you enter an unlock code from them.
Lost service in Downtown Vancouver?
Only your provider can reverse a SIM swap or secure your account, so if you see the warning signs above, call them first. If your provider confirms the account is fine and your phone still has no service, the cause may be the SIM or the phone itself.
That’s where MyChoice Mobile Repair can help. Bring your phone to our kiosk in Downtown Vancouver on Granville Street, open every day from 9 AM to midnight, and we’ll check it. We also handle SIM cards and phone software problems. Call (236) 785-8300 or ask for a quote before you come in.
Need a hand with your phone?
MyChoice Mobile Repair is a kiosk at 798 Granville St in Downtown Vancouver. Call us, message us or send a quote request.