SIM Swap Fraud Can Hijack Your Phone Number Without Touching Your Device

SIM swap fraud allows attackers to seize a victim's phone number by impersonating them to their mobile carrier using personal data sourced from breaches, social media, or social engineering. Once the carrier transfers the number to an attacker-controlled SIM, all calls and texts — including bank verification codes — are rerouted to the fraudster. The FBI's Internet Crime Complaint Center has monitored and formally warned about this scheme since 2018, noting that reported losses likely undercount the true damage, as downstream financial theft is often logged under separate fraud categories. Victims typically receive no advance warning, with the first sign usually being an unexplained loss of cell service. The FBI recommends setting a carrier account PIN, avoiding public disclosure of financial details, and replacing SMS-based authentication with an authenticator app or physical security key.