SIM swap: the signs and what to do
What a SIM swap is
Your phone number is tied to a SIM or eSIM. In a SIM swap, a criminal asks your network to move your number to a SIM or eSIM they control. Verizon (a US network) describes it as a customer's number being "transferred to a different SIM card or eSIM profile under the control of a criminal". Police Scotland (UK) says criminals use personal data from leaks or phishing to pass the network's security checks.
It matters because many accounts send a code by text to prove it's you. The UK's National Cyber Security Centre says attackers carry out SIM swaps to get at codes sent by text. This is not the same as a stolen phone. Your phone can be in your hand and the number can still be taken.
The signs
- Your phone suddenly stops working: no data, no texts, no calls. The US Federal Trade Commission (FTC) lists this first.
- A message from your network saying a SIM has been activated on a new device, or that your number or SIM was used on a new device. The FTC, Police Scotland and Verizon all list this.
- You can't log in to accounts, or you get codes you didn't ask for. Police Scotland lists both.
- Changes to your account details that you didn't make. Canada's Cyber Centre lists this. It also warns about messages asking you to verify your account with a PIN or a link.
Canada's Cyber Centre adds that a successful swap means you lose cellular service and Wi-Fi calling. Verizon says your phone suddenly stopping may be the first sign. A dropped signal is often just a bad signal, so treat it as a reason to check, not proof.
What to do right away
- Contact your network from another phone. The FTC says to contact your provider immediately to take back control of your number. Use the contact details on the network's own website or app, or ask the person you borrow the phone from to help. Who to call depends on your country, so pick yours here.
- Then your bank and email. Verizon advises changing the passwords for your financial and email accounts right away. The FTC says to check your credit card, bank and other financial accounts for charges or changes you didn't make. Our reasoning for email: it is often how other accounts are reset. Protecting your email has the steps, and your bank has its own guide.
- Which comes first? The FTC says to contact your provider first and change your account passwords once you have your number back. Verizon says to change the financial and email passwords right away. Our advice: contact your network first if you can, and if you can't reach it quickly, call your bank anyway rather than wait.
- Report it. Police Scotland says you can report a SIM swap to it online, by phone or in person. Other countries have their own police or fraud reporting.
- Don't give out a code. Police Scotland warns that if someone claiming to be your provider asks for your code, you should not give it to them.
If your phone was stolen rather than swapped, start with what to do if your iPhone is stolen and getting a replacement SIM.
How to make it harder
- Add a PIN or password to your account with your network. The FTC says to set one up, and to check your provider's website for how.
- Ask what extra protection your network offers. Police Scotland and Canada's Cyber Centre both suggest asking. Canada's Cyber Centre mentions port protection or a SIM lock, if available. One example: Verizon (US) says its SIM Protection, which it describes as at no cost, locks a line so it is blocked from transactions needing a new SIM, including SIM swaps. Other networks differ, and some may offer nothing.
- Don't rely on text codes alone. The FTC says text message verification may not stop a SIM swap, and suggests an authentication app or security key. The US agency CISA ranks text codes as the weakest kind of two-step sign-in and a physical security key as the strongest. The UK's NCSC recommends using passkeys where a service offers them. Our advice: where an account lets you, choose an authenticator app or a passkey, and turn off the text option if the account allows it.
A SIM PIN on your iPhone is still worth setting, because it stops your SIM being used in another phone. This is our advice, not something the sources say: a swap is asked for at your network, not on your phone, so a SIM PIN on its own may not stop one. The network-side protection above is the part aimed at it.
How FirstHour helps
Plan B has a guided tip for setting a SIM PIN, lets you tick your network so its number is ready in your first-hour plan (checked numbers are built in for the Philippines and the US so far), and keeps your phone's details. It cannot detect a SIM swap or stop one. Your network does that, and FirstHour can't contact it for you.
Questions
Is losing signal always a SIM swap?
No. Poor coverage, a network fault or a phone problem can look the same. Check from another phone or ask your network. If you are unsure, it costs little to ask.
Sources
- SIM Swap Scams: How to Protect Yourself, Federal Trade Commission (US), read 4 November 2026
- SIM swapping, Police Scotland (UK), read 4 November 2026
- Security considerations for SIMs (ITSAP.10.021), Canadian Centre for Cyber Security, read 4 November 2026
- What is a SIM Swapping Scam?, Verizon (US), read 4 November 2026
- Enable / Disable SIM Protection and Number Lock, Verizon (US), read 4 November 2026
- Why a Strong Password isn't Enough: Your Guide to Multifactor Authentication, CISA (US), read 4 November 2026
- Comparing the security properties of traditional user credentials and FIDO2 credentials for personal use, National Cyber Security Centre (UK), read 4 November 2026