How it works
Using personal details gathered from data leaks or phishing, a criminal persuades your mobile provider to move your number to a new SIM card. Once it is active, one-time passcodes and calls go to them, and they can reset passwords and move money.
Warning signs
- Your phone suddenly shows "no service" or "emergency calls only" for no clear reason.
- You receive messages about a SIM change you did not ask for.
- You are locked out of email or banking apps.
- Payments or new payees appear that you do not recognise.
What to do
- Contact your mobile provider from another phone and ask them to block the number transfer.
- Call your bank's fraud line and ask them to freeze your accounts.
- Change passwords, starting with your email account.
- Payments you did not authorise are treated differently from payments you were tricked into making, so tell your bank clearly that you did not make them.