# What does the FCC SIM swap rule require?

> **Short answer:** The FCC’s 2023 order, FCC 23-95, requires US wireless carriers to authenticate customers securely before moving their number to a new SIM or carrier, to notify customers of SIM-change and port-out requests, to offer account locks, and to train staff and keep records. It regulates carriers, not how banks or apps use SMS codes.

- URL: https://glide-cleartext.pages.dev/q/what-does-the-fcc-sim-swap-rule-require/
- Last verified: 2026-09-15 by [VERIFIER NAME] (revision 2)
- Publisher: Cleartext, owned by [OWNER ENTITY] (see https://glide-cleartext.pages.dev/about/ownership-and-funding/)

## What the order requires

The Report and Order, adopted on November 15, 2023, amends the FCC’s customer proprietary network information (CPNI) and number-portability rules.[^1][^2] Wireless carriers must:

- **Authenticate securely** before redirecting a customer’s number to a new device or another carrier.
- **Handle failed attempts** with procedures for responding to failed authentication.
- **Notify customers** promptly when a SIM change or port-out is requested.
- **Offer account locks** that customers can switch on to block number changes.
- **Train staff and keep records** of SIM-change and port-out requests.

## When it took effect

The rules were published in the Federal Register on December 8, 2023.[^1] The FCC later waived the original July 2024 compliance date while the rules’ information-collection requirements went through federal review.[^3] Check the FCC’s current notice before citing a compliance date.

## What it doesn’t cover

The order regulates carriers. It says nothing about whether a bank or app should keep using SMS codes. A carrier that follows the rules makes SIM swaps harder, but a bank that still treats an SMS code as proof of identity remains exposed to insiders, to account takeover at the carrier, and to phishing of the code itself.

## What this means for you

### Banks & credit unions

The rule helps you indirectly: fewer successful SIM swaps at carriers. It creates no obligation for banks and no safe harbor for relying on SMS codes.

### Fintechs & payment firms

Customer-facing carrier features the rule requires, such as account locks, are worth pointing users to in your security settings and help content.

### Developers & identity teams

Carrier notifications don’t reach your app. If you depend on phone numbers, you still need your own SIM-change signal and alerts.

## Follow-up questions

**When did the FCC SIM-swap rules take effect?**

They were published in the Federal Register on December 8, 2023. The FCC later waived the original July 2024 compliance date while the information-collection requirements went through federal review, so check the FCC’s current notice before citing a date.

**Does the rule cover banks?**

No. It amends rules for wireless carriers only.


## Sources

[^1]: Protecting Consumers from SIM Swap and Port-Out Fraud. Federal Register, 2023-12-08. https://www.federalregister.gov/documents/2023/12/08/2023-26338/protecting-consumers-from-sim-swap-and-port-out-fraud
[^2]: Report and Order FCC 23-95. FCC, 2023-11-15. https://docs.fcc.gov/public/attachments/FCC-23-95A1.txt
[^3]: Order on compliance date (DA 24-649). FCC. https://docs.fcc.gov/public/attachments/DA-24-649A1.pdf

## Related questions

- [What is a SIM swap attack?](https://glide-cleartext.pages.dev/q/what-is-a-sim-swap-attack/)
- [How do I know if I’ve been SIM swapped?](https://glide-cleartext.pages.dev/q/how-do-i-know-if-i-have-been-sim-swapped/)
- [Has any US regulator banned SMS OTP?](https://glide-cleartext.pages.dev/q/has-any-us-regulator-banned-sms-otp/)
- [How can banks defend against SIM swap fraud?](https://glide-cleartext.pages.dev/q/how-can-banks-defend-against-sim-swap-fraud/)

## Cite

Cleartext. “What does the FCC SIM swap rule require?” Last verified 2026-09-15 (rev. 2). https://glide-cleartext.pages.dev/q/what-does-the-fcc-sim-swap-rule-require/

## Changelog

- 2026-09-15: Clarified the compliance-date history.
- 2026-08-10: First published.