SCAM LIBRARY · PHISHING & LINKS
The SIM-swap account takeover
A scammer tricks your phone carrier into switching your phone number to a device they control, letting them hijack your online accounts.
Documented by the FTC & FBI IC3 · reviewed 2026-07-11T18:14:57.874Z
How it works
The scammer contacts your mobile carrier pretending to be you, claiming they've lost their phone or need to switch to a new one. Once they succeed, your phone stops working, and they use the brief window to reset passwords on your email and financial accounts. You may not realize what happened until you can't access your accounts or receive important messages.
What it can look like
You notice your phone has no service. You call your carrier to report it, and customer service says your number was already transferred to another device just hours ago—something you never did. By then, someone has already reset your email password and is accessing your bank account.
How it unfolds
Scams like this follow a pattern. Knowing the arc helps you notice where you are — and step away before the ask.
Red flags
- Your phone suddenly loses service without warning.
- You receive emails about password resets or account changes you didn't make.
- Your carrier tells you your number was transferred to a different phone.
- You can't access email or online banking, even though you know your passwords.
- Friends or family say they're getting odd messages supposedly from you.
What to do
- Contact your mobile carrier immediately and ask them to secure your account with extra authentication requirements or a PIN that only you know.
- Change passwords on your email and financial accounts from a secure device, and enable two-factor authentication (not just SMS text codes).
- Report the incident at reportfraud.ftc.gov so authorities can track these schemes.
If it already happened
Acting quickly can limit the damage. You are not alone, and it is not your fault.
- Contact your phone carrier immediately by going to a physical store or calling from another phone. Tell them your number may have been compromised and ask them to lock your account and block any SIM-swap requests without in-person verification.
- Call your bank and any financial institutions where you have accounts. Report that your identity may have been compromised, freeze accounts if needed, and review recent transactions for unauthorized activity.
- Change the passwords on your email, banking, and social media accounts from a secure device—use a different computer or phone if possible—and enable multi-factor authentication (not SMS-based if you can help it) on all important accounts.
- Report the incident to the Federal Trade Commission at reportfraud.ftc.gov, and keep records of all communications, account changes, and fraudulent charges you discover.
Sources
Guidance on this page draws on public, authoritative consumer-protection resources (verified live 2026-07-10). Documented by the FTC & FBI IC3 · reviewed 2026-07-11T18:14:57.874Z.
