Key Facts About SIM Swap Fraud
SIM swap fraud, also known as SIM hijacking, is a growing cyber threat where criminals take control of a victim's mobile phone number by convincing the telecom provider to issue a new SIM card. Once they have the number, they can intercept one-time passwords (OTPs) and gain access to bank accounts, social media, and other sensitive services.
How SIM Swap Fraud Works
The fraud typically involves these steps:
- Information Gathering: Criminals collect personal data through phishing emails, social engineering, or data breaches. Details like your full name, date of birth, address, and even the last four digits of your Aadhaar or PAN card are used to impersonate you.
- Contacting the Carrier: The fraudster contacts your mobile operator, pretending to be you, and requests a SIM replacement, claiming the original SIM is lost or damaged.
- Activation: If the carrier's verification process is weak, they issue a new SIM, deactivating your original one. The criminal then activates the new SIM on their device.
- Account Takeover: With your number, the fraudster resets passwords and receives OTPs, gaining access to your email, banking, and other accounts.
Impact on Victims
Victims often realize they've been targeted when their phone suddenly loses network connectivity. By the time they contact the carrier, the criminal may have already drained bank accounts, made unauthorized purchases, or locked them out of social media profiles. In Himachal Pradesh, several cases have been reported where victims lost lakhs of rupees within hours.
What Readers Should Know
To protect yourself:
- Enable Two-Factor Authentication (2FA): Use authenticator apps like Google Authenticator or hardware tokens instead of SMS-based OTPs.
- Set a SIM PIN or Password: Most carriers allow you to set a unique PIN or password for SIM-related requests. This adds an extra layer of security.
- Limit Personal Information Online: Avoid sharing sensitive details like your phone number, address, or ID numbers on social media.
- Monitor Your Mobile Service: If your phone suddenly loses signal for no reason, contact your carrier immediately.
- Use Strong, Unique Passwords: Ensure your email and banking passwords are strong and not reused across sites.
Frequently Asked Questions
What is SIM swap fraud?
SIM swap fraud occurs when a cybercriminal tricks your mobile carrier into transferring your phone number to a new SIM card in their possession, allowing them to intercept OTPs and access your accounts.
How can I protect myself from SIM swap fraud?
Use strong passwords, enable two-factor authentication via authenticator apps, avoid sharing personal information online, and contact your carrier immediately if you lose service unexpectedly.
What should I do if I become a victim of SIM swap fraud?
Contact your mobile carrier to regain control of your number, change passwords for all accounts, notify your bank, and file a complaint with the cybercrime portal.