What it is
In a SIM-swap attack, a criminal persuades or bribes someone to transfer your mobile number to a SIM card they control, or exploits a weak porting process. Once they receive your calls and SMS, they can intercept one-time codes and reset passwords — reaching your email, mobile money and bank. Your own phone usually loses service when this happens.
Warning signs
Your phone unexpectedly shows "no service" or "SIM not provisioned" and stays that way.
You stop receiving calls and SMS, or get alerts about a SIM change or new sign-ins you did not make.
Contacts receive messages from your number that you did not send.
How to protect yourself
Set a PIN or passcode with your mobile provider to authorise SIM changes where available, and keep your number private. Prefer an authenticator app or a passkey over SMS codes for important accounts, and secure your main email first. Our guide on protecting your number from SIM-swap has the full steps.
If it happens to you
Contact your mobile provider immediately to suspend and recover the number.
From a trusted device, secure your main email, then mobile money and bank accounts; sign out other sessions and change passwords.
Watch for unauthorised transactions, keep records, and report through our reporting guidance.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.