SIM Swapping Explained: The Attack That Steals Your Phone Number
SIM swapping lets an attacker take over your phone number entirely. Here's how the attack actually works.
SIM swapping involves an attacker convincing a mobile carrier to transfer your phone number to a SIM card they control, usually through social engineering or by exploiting weak identity verification at the carrier.
Why stealing a phone number is so valuable
Once an attacker controls your phone number, they can intercept text message login codes and password reset links sent to that number, potentially unlocking access to email, banking, and other accounts that rely on it for verification.
How to actually protect against it
Setting a dedicated PIN or passcode with your mobile carrier specifically required for any changes to your account, and switching from text message codes to an authenticator app or physical security key for important accounts, are the most effective protections against this specific attack.