One useful thing to do today
Ask your carrier about available account PINs and transfer protections.
More everyday safety lessonsChoose your depth. Learn at your own pace.
Understand it
A SIM-swap scam involves moving a victim’s mobile number to a SIM controlled by someone else. The phone can remain in your pocket while calls or texts go elsewhere. Losing signal alone does not prove this happened: ordinary outages can also interrupt service.
If you receive an unexpected transfer notice or see other warning signs, contact your carrier through a known route promptly. Review important accounts and use stronger sign-in methods where supported.
Under the hood
An attacker who controls the number may receive SMS-based verification or recovery messages. This is a weakness of relying on control of a phone number as proof. Authenticator apps and security keys do not depend on receiving an SMS at that number.
Practitioner perspective
Map services that depend on phone-number recovery and review the strength of their alternative methods. In an incident, coordinate account protection with the carrier and preserve the times of service loss, alerts and suspicious sign-ins.
Watch it work
A fictional, simplified model. Select a component to inspect it, or follow the steps in order.
Explore the system
Alert arrives
An account owner receives a transfer notice they did not request.
Read every step without animation
Unexpected transfer
- Alert arrives. An account owner receives a transfer notice they did not request.
- Known carrier route. They contact the carrier without using a suspicious message link.
- Protect accounts. They review affected accounts and follow verified recovery guidance.
Treat unexpected transfer activity as a reason to verify promptly.
Outage checked
- Signal lost. A phone cannot connect.
- Check context. The owner checks carrier service information and account notices.
- Confirm cause. They distinguish a service outage from unauthorized account activity.
Investigate the evidence rather than assuming the cause.
What could go wrong
A fictional attacker convinces a carrier to move a number and then tries an SMS account-recovery flow.
What you can do
- Ask your carrier about available account PINs and transfer protections.
- Use supported stronger authentication and contact the carrier promptly about an unauthorized transfer.
Common mistakes
- Keeping the physical phone does not guarantee control of the number.
- A temporary signal outage by itself is not proof of fraud.
Check your understanding
Active recall: explain this idea in 30 seconds
A SIM-swap scam involves moving a victim’s mobile number to a SIM controlled by someone else. The phone can remain in your pocket while calls or texts go elsewhere. Losing signal alone does not prove this happened: ordinary outages can also interrupt service.
Now give an example and name one limitation. Revisit the explanation if you get stuck.
Primary sources
Original explanations informed by these specifications and official resources. Source versions and lesson review are separate from product updates.
Content reviewed 2026-09-11. Read the editorial policy.