Someone can steal your phone number without touching your phone
In a SIM swap, a scammer convinces your phone carrier that they're you and gets your number moved to a SIM card or phone they control. Your phone suddenly loses service. Theirs now gets your calls and texts — including the one-time codes banks, email providers, and crypto exchanges send to "verify it's you."
Why it's so damaging
Your phone number is the backup key to a lot of your life. With it, an attacker can hit "forgot password" on your email, receive the reset code, and go from there to anything linked to that email. People have lost savings and crypto this way in a matter of hours.
The rules got tougher — but you still need to act
Since July 2024, FCC rules require wireless carriers to use secure ways of confirming your identity before moving your number, and to notify you right away when someone requests a SIM change or a transfer to another carrier. That helps. But the strongest protection is a free lock you have to turn on yourself.
Turn on your carrier's lock
Each major carrier offers a free setting that blocks SIM changes and number transfers until you turn it off:
- Verizon: Number Lock (blocks transfers to another carrier) and SIM Protection — in the My Verizon app
- T-Mobile: SIM Protection and Port-Out Protection — in the T-Life app or your online account
- AT&T: Wireless Account Lock — in the myAT&T app
Smaller carriers usually offer something similar — search your carrier's name plus "port out PIN" or "number lock." While you're there, set an account PIN or passcode that isn't your birthday or the last digits of your SSN.
When you legitimately switch carriers or phones, you just turn the lock off first.
Make your number less important
- Use an authenticator app or a passkey instead of text messages for two-factor login on important accounts, especially email and banking. A stolen number can't intercept those
- Remove your phone number as a password-recovery option on accounts that let you use something stronger
- Don't post your number publicly — it's the first thing an attacker needs
Warning signs it's happening
- Your phone suddenly shows "No Service" or "SOS only" somewhere it normally works
- A text or email from your carrier about a SIM change or transfer request you didn't make
- Password-reset emails you didn't request
If that happens, call your carrier immediately from another phone, then change your email password from a device you trust.
Quick reference
- SIM swap = your number moved to a scammer's phone, along with your text login codes
- Turn on your carrier's free lock: Verizon Number Lock, T-Mobile SIM Protection, AT&T Wireless Account Lock
- Set a carrier account PIN that isn't guessable
- Use an authenticator app or passkey instead of texted codes for email and banking
- Sudden "No Service"? Call your carrier from another phone right away