SIM Swapping: How Attackers Steal Your Number (and How to Block It)
If someone takes over your phone number, your SMS codes go to them. How the attack works and the carrier setting that stops it.
Victor NunesSeptember 16, 2026 · 7 min read
Reviewed by Diana Reyes · September 18, 2026
SIM swapping is how attackers defeat SMS-based security. They don't touch your phone — they convince your carrier to move your number to a SIM they control. Suddenly your calls, texts, and verification codes are theirs.
How the attack works
Using personal details gathered from leaks and social media, the attacker calls your carrier posing as you and reports a 'lost phone', requesting the number be moved to a new SIM. If the carrier's checks are weak, it works in minutes.
The warning sign
Your phone suddenly loses all signal and shows 'No SIM' or 'SOS only' for no reason. If that happens unexpectedly, treat it as urgent — call your carrier from another phone immediately.
How to block it
Add a port-out PIN or 'number lock' with your carrier (most offer this free). Move important accounts off SMS 2FA to an authenticator app. Keep your birth date and other verification details off public profiles.
If it happens to you
Call your carrier to reclaim the number, then rush to secure your email and financial accounts — those are the real targets. Change passwords and check for unauthorized access.
Frequently asked questions
How do I know if I've been SIM-swapped?
Your phone unexpectedly loses service entirely. Contact your carrier from another line immediately if this happens without explanation.
Does a port-out PIN really help?
Yes — it requires a secret PIN before your number can be moved, blocking the most common version of the attack.
Victor is a security researcher who breaks down how attacks actually work — phishing, SIM swapping, social engineering — so you can recognize them before they cost you.
