Topic Attack
SIM swap
Hijacking a phone number by getting the carrier to move it to a SIM or eSIM the attacker controls, so the attacker receives the victim's texts and calls.
Also called: SIM swapping, SIM hijacking, port-out fraud
Questions (6) #
- How can banks defend against SIM swap fraud?Identity
Stop treating an SMS code as proof of identity for high-risk actions such as password resets, new payees and contact-detail changes.
- How do I know if I’ve been SIM swapped?Identity
The clearest sign is that your phone suddenly loses service where coverage is normally fine, and calls and texts stop arriving.
- What does the FCC SIM swap rule require?Regulation
The FCC’s 2023 order, FCC 23-95, requires US wireless carriers to authenticate customers securely before moving their number to a new SIM or carrier, to notify customers of SIM-change and port-out requests, to offer account locks, and to train staff and keep records.
- What is a SIM swap attack?Identity
A SIM swap is when a criminal gets a mobile carrier to move a victim’s phone number to a SIM or eSIM they control, by impersonating the customer, bribing an insider or taking over the carrier account.
- What is carrier-based authentication?Identity
Carrier-based authentication verifies a user through their mobile operator instead of sending them a code.
- What is Glide Identity’s MagicalAuth, and how is it different from SMS OTP?Identity
MagicalAuth is Glide Identity’s product for replacing SMS one-time passcodes.
Comparisons (2) #
Checklists (3) #
Glossary #
- Port-out fraud
- A variant of SIM swap in which the criminal transfers the victim's phone number to a different carrier, rather than to a new SIM at the same carrier. The FCC's 2023 rules cover both.
- SIM swap
- When a criminal gets a mobile carrier to move a victim's phone number to a SIM or eSIM they control, by social engineering, bribery or stolen credentials. The criminal then receives the victim's calls and texts, including one-time passcodes.