Quick answer: SIM swapping is when a scammer tricks your mobile carrier into moving your phone number to a SIM card they control. Once they have your number, they receive your calls and texts — including the security codes that protect your bank, email, and crypto. You stop it by locking your carrier account (Verizon SIM Protection, AT&T Wireless Account Lock, T-Mobile SIM Protection), moving your two-factor codes off text messages and into an authenticator app, and acting within minutes if your phone suddenly loses signal for no reason.
Your phone number feels like it belongs to you, but it actually lives on your carrier’s system — and that system can be talked into handing your number to someone else. That is the whole trick behind SIM swapping, one of the fastest-growing ways criminals empty bank accounts. The good news: a few settings most people never touch make you a much harder target. Here is how the scam works and how to shut it down.
Last Updated: August 2026 | Samuel Smith covers phone security and account takeovers, and has walked readers through locking down carrier accounts against SIM-swap fraud.
What SIM swapping actually is
Every phone number is tied to a SIM — the little chip (or the newer built-in eSIM) that tells the network “this number belongs to this device.” In a SIM swap, a scammer contacts your carrier pretending to be you and claims your SIM was lost, stolen, or damaged. They ask the carrier to activate your number on a new SIM in their possession. If the carrier believes them, your number goes silent on your phone and springs to life on theirs.
They usually already have some of your personal details — your name, address, birthday, maybe the last four of your Social Security number — scraped from data breaches or social media. That is often enough to pass a carrier’s identity check.
Why it is so dangerous
Losing your number sounds annoying, not catastrophic. The danger is what your number unlocks. Most people protect their bank, email, and social accounts with two-factor codes sent by text. When a scammer controls your number, those codes go to them. That lets them reset passwords, approve logins, and authorize transfers — draining bank accounts, seizing cryptocurrency wallets, and taking over email in minutes.
Because it defeats text-message security codes, a SIM swap can bypass protections you thought were keeping you safe. That is exactly why moving your important codes off SMS matters so much, which we will get to below.
Warning signs your number has been swapped
SIM swaps happen fast, so recognizing the signs early can save your accounts:
- Your phone suddenly has no signal — no calls, no texts, “SOS” or “No Service” — even though you are somewhere with coverage.
- You get locked out of accounts or receive password-reset and login notifications you did not request.
- A message from your carrier confirming a SIM change, number transfer, or account update you never asked for.
- Friends say they got strange calls or texts from your number.
If your phone goes dead like this, do not assume it is a network glitch. Treat it as an emergency and move quickly.
How to protect yourself before it happens
From experience: I used to run a prepaid line because it capped my spending and was easy to change, but asking for a port-freeze didn’t count for much there. Moving to a real postpaid account — especially one with several people on it — puts a lot more hurdles in a SIM swapper’s way, and I haven’t been swapped since.
For the strongest protection, move your important logins off text-message codes and onto an authenticator app or a hardware security key. A FIDO-certified key like the YubiKey 5 NFC can’t be phished or SIM-swapped — even someone holding your number can’t sign in without the physical key in hand.
1. Lock your carrier account
This is the single most effective step. Every major U.S. carrier now offers a free feature that blocks anyone from moving your number to a new SIM or a new carrier without your permission:
- Verizon: turn on SIM Protection in My Verizon under Account Security settings; you will get a text to confirm. You can also request a Number Transfer PIN by dialing #PORT.
- AT&T: open the myAT&T app, sign in as the primary account holder, and go to Services → Mobile Security → Wireless Account Lock, then toggle each line on. It blocks port-outs and many sensitive changes.
- T-Mobile: enable SIM Protection per line or account-wide in the T-Life app or web portal. T-Mobile also requires a photo ID in-store to remove a SIM lock and offers separate Port-Out Protection.
If you are on a smaller or prepaid carrier, call them and ask what “port-out protection,” “number lock,” or “port freeze” they offer, and add a separate account PIN.
2. Move your 2FA off text messages
Text-message codes are the weak link SIM swappers exploit. Switch your most important accounts — email, bank, crypto — to an authenticator app (Google Authenticator, Authy, Microsoft Authenticator, or one built into your password manager) or, better still, a hardware security key like a YubiKey. An attacker who steals your number cannot intercept codes generated on your own device. Our guide on how to set up two-factor authentication walks through the switch, and securing your phone accounts with 2FA covers which accounts to prioritize.
3. Add a strong, separate carrier PIN
Set a unique PIN or passcode on your carrier account that is not your birthday, your address number, or the same code you use elsewhere. This is the password a real store rep should ask for before making changes to your line.
4. Shrink your public footprint
Scammers pass carrier identity checks using details they dig up about you. The less of your birthday, address, and phone number floating around on social media and data-broker sites, the harder you are to impersonate. A password manager also means a stolen text code alone will not open your accounts, because your passwords are long, unique, and not reused.
What to do if it is happening right now
If your phone loses service unexpectedly and you suspect a swap, act immediately:
- Call your carrier from another phone (use the fraud or customer-service line) and tell them you think your number was swapped. Ask them to reverse the SIM transfer and lock the account.
- Log into your email and bank from a computer and change passwords; check for pending transfers or new payees.
- Contact your bank’s fraud department if money moved, and freeze accounts if needed.
- Report it to the FTC at reportfraud.ftc.gov and file a police report — useful if you need to dispute fraudulent charges.
Speed matters. The faster you regain the number and lock down email, the less damage a scammer can do. If you are unsure whether you were targeted, our guide on signs your phone has been hacked can help you tell the difference.
Frequently asked questions
How do SIM swappers get my personal information?
Usually from data breaches, phishing messages, and public social-media profiles. They collect enough details — name, address, birthday, sometimes part of your Social Security number — to convince a carrier rep they are you. Limiting what you share publicly makes their job harder.
Does a SIM swap mean my phone was hacked?
No. A SIM swap targets your carrier, not your device. Your phone is not infected; it simply loses service because your number now lives on someone else’s SIM. That is why the fix is with your carrier, not your handset.
Is an eSIM safer than a physical SIM?
An eSIM is not automatically safer from swapping, because the attack targets your carrier account rather than the chip. The protections are the same: lock your account, use app-based 2FA, and set a strong carrier PIN.
Will carrier account locks stop me from upgrading my own phone?
You can lift these locks yourself anytime through your carrier’s app or by verifying your identity, so upgrading or legitimately switching your SIM is still easy. The lock only stops changes made without your approval.
Should I stop using text-message 2FA entirely?
Where an account offers an authenticator app or security key, use that instead of SMS for anything sensitive. If text codes are the only option an account supports, they are still better than no second factor — just make sure that account is not your last line of defense for your money.
How quickly can a SIM swap drain my accounts?
Very quickly — often within minutes of taking over your number, because they can reset passwords and approve transfers using intercepted codes. That is why recognizing a sudden loss of service and calling your carrier right away is so important.
Locking your carrier account and moving your codes off text messages takes about fifteen minutes today and closes the door on the most common version of this scam.