SIM Swap Protection: How to Keep Your Phone Number Safe

A SIM swap happens when a criminal convinces your mobile carrier to move your phone number to a SIM card they control. Once they own your number, they can receive your calls and text messages, including verification codes. The best protection is to stop depending on your phone number for security.

You can reduce the risk with a few settings and habits, none of which require technical skill.

How a SIM swap works

Your number is tied to a SIM or an eSIM profile. Carriers must be able to move numbers when customers get a new phone, and that process can be abused. An attacker gathers personal details about you, often from data breaches, social media, or phishing. They then contact the carrier, or a store employee, pretending to be you and ask to transfer the number. In some cases, insiders are bribed or tricked.

After the swap, your phone loses service, while the attacker begins resetting passwords through SMS codes on email, banking, and social accounts.

Warning signs

• Your phone suddenly shows no signal or “emergency calls only” for no clear reason.
• You receive notifications about a SIM change or number transfer you did not request.
• You stop receiving calls and texts.
• Alerts arrive about password resets or logins you did not attempt.
• Accounts lock you out unexpectedly.

If your signal vanishes unexpectedly, use another device to contact your carrier at once and check your accounts.

Step 1: Add a carrier PIN or passcode

Many carriers let you set a PIN, passcode, or account lock needed for changes such as SIM transfers. Ask what protections they offer, and enable all of them. Choose a PIN that is not guessable, and do not reuse your phone unlock code.

Step 2: Reduce what attackers can learn

Impersonators rely on personal details. Limit them by:

• Avoiding publishing your birthday, address, or phone number on public profiles.
• Using unique answers for any security questions.
• Being careful about phishing that asks for account details.
• Using a different email address for your carrier account than the one you share widely.

Step 3: Move away from SMS for two-factor

This is the most effective step. Replace text-message codes with:

1. Passkeys or hardware security keys where supported.
2. Authenticator app codes on your device.
3. Backup codes stored offline.

Prioritize your email, banking, password manager, and cloud accounts, because those would be the first targets.

Step 4: Review recovery numbers

Many services use your phone number as a recovery option. Where you can, remove the number from important accounts or make it secondary, and rely on stronger recovery tools. Make sure your email account, which controls resets, has no SMS-only protection.

Step 5: Protect your carrier account

Secure your carrier login with a unique password and two-factor authentication. Turn on notifications for account changes. Ask about a port-out lock, which blocks moving the number to another carrier without extra steps.

Step 6: Consider a separate number

Some people keep one number only for security codes and recovery, and share another number publicly. This reduces exposure of the sensitive number. It also works best when combined with a PIN and app-based authentication.

What to do if you are SIM swapped

1. Contact your carrier from another phone or in person and report it. Ask them to restore the number and lock the account.
2. Change passwords for your email first, then banking and other important accounts, using a trusted device.
3. Replace SMS-based two-factor with an authenticator app, key, or passkey.
4. Contact your bank and financial providers, and watch statements closely.
5. Check email forwarding rules, recovery details, and connected apps for tampering.
6. Report the incident to the relevant authorities or consumer protection channel in your region.
7. Be alert to follow-up phishing messages.

eSIM and number transfers

eSIM profiles are transferred digitally, which can be faster to abuse if your carrier account is poorly protected. The defenses are the same: a PIN, account lock, notifications, and no reliance on SMS for security.

What to ask your carrier

When you call or visit, ask specific questions: Can I set a PIN required for SIM changes? Can I lock my number against transfers to another carrier? How do you verify identity for in-store changes? Will I be notified when a SIM or eSIM change is requested? Do you offer additional protection for high-risk customers? The answers tell you which protections exist and which gaps you should cover by using app-based authentication. Keep a note of what you enabled and when.

Travel and phone replacements

Be extra careful when traveling, since lost or stolen phones and foreign SIMs create openings for confusion. If you replace a phone or switch carriers, double check that every account that relied on the old number still has a working second factor. Remove the old number from account recovery once it is no longer yours.

Frequently asked questions

Can a SIM swap happen to anyone?

Anyone with a phone number can be targeted, but criminals prefer people with valuable accounts. Reducing reliance on SMS and adding carrier protections makes you much less attractive.

Does an authenticator app protect me from SIM swapping?

Yes, for the accounts that use it. The code is generated on your device and does not rely on your number. Still lock down recovery options that use SMS.

Is a SIM lock the same as a carrier PIN?

No. A SIM PIN locks the physical card on your phone. A carrier PIN or account lock protects your account from unauthorized changes. Use both when available.

Key takeaways

• SIM swapping gives criminals your texts and calls, including security codes.
• Set a carrier PIN, enable account locks, and secure your carrier login.
• Replace SMS-based two-factor with apps, keys, or passkeys.
• Act immediately if your phone suddenly loses service.