How SIM swapping works
Imagine receiving an unexpected message saying your phone has lost service.
You try making a call, but it doesn't work. Your texts aren't coming through either.
Meanwhile, a criminal has persuaded your wireless carrier to transfer your number to a device they control.
They can now receive calls and text messages intended for you, including some security codes used to access online accounts.
If they also have your login information, they may be able to get into your email, financial accounts, or other services.
SIM swapping doesn't automatically give someone access to all your accounts. They may still need passwords or other information. But losing control of your phone number can remove an important layer of protection.
The good news: Your wireless carrier may offer free protection
AT&T, T-Mobile, Verizon, and Google Fi all offer security features designed to make unauthorized transfers more difficult.
Some features prevent someone from moving your number to another SIM or device. Others prevent your number from being transferred to another wireless carrier.
These are two different threats, so it's important to understand which protections your carrier provides.
Here's how to enable them.
AT&T
Wireless Account Lock
AT&T offers a free feature called Wireless Account Lock.
When enabled, it blocks certain account changes, including SIM and eSIM swaps, phone-number changes, and transfers to or from another wireless carrier.
The lock applies to all eligible devices and lines on your wireless account.
How to enable it:
- Open the AT&T app on a device connected to your wireless account.
- Sign in if necessary.
- Tap the person icon.
- Scroll down and select Wireless account lock.
- Swipe to enable the lock.
AT&T sends an email to the primary account holder and a text message to each active wireless number when the lock is turned on or off.
T-Mobile
T-Mobile offers two separate protections worth enabling.
1. SIM Protection
This helps prevent someone from moving your number to another SIM or eSIM.
To enable it:
- Open the T-Life app.
- Select Manage.
- Select the gear icon.
- Choose Security.
- Select SIM Protection.
- Enable protection for your entire account or individual lines.
- Save your changes.
2. Port Out Protection
This helps prevent someone from transferring your phone number to another wireless carrier.
To enable it:
- Open the T-Life app.
- Select Manage.
- Under My Account, select See Plans.
- Select Manage add-ons.
- Choose the line you want to protect.
- Find Port Out Protection under the available services.
- Select it and complete the confirmation process.
Important: Port Out Protection must be added separately to each line you want protected. Don't assume protecting one number protects the others.
Both features are available at no additional cost.
Verizon
Verizon also offers two separate protections.
1. SIM Protection
This helps prevent unauthorized SIM changes, including SIM swaps and certain device upgrades.
To enable it:
- Open the My Verizon app.
- Select Account.
- Go to Edit Profile and Settings.
- Scroll to the Security section.
- Select SIM Protection.
- Choose the phone number or numbers you want to protect.
- Turn protection on.
2. Number Lock
This helps prevent someone from transferring your phone number to another wireless carrier.
To enable it:
- Sign in to My Verizon.
- Go to Account.
- Select Account settings.
- Select Security settings.
- Find Number Lock.
- Select the number you want to protect.
- Turn the feature on and save your changes.
Both features are available without an additional charge.
Important: Verizon's Number Lock and SIM Protection are separate features. Enable both for more complete protection.
Google Fi
If you use Google Fi, there's a feature called Number Lock.
It's free and provides an additional layer of protection against unauthorized SIM swaps and number transfers.
When Number Lock is enabled, you cannot:
- Transfer your number to another phone.
- Transfer your number to another wireless carrier.
How to enable it:
- Visit https://fi.google.com/account.
- Sign in to your Google Account.
- Under Phone settings, select Privacy & security.
- Find Number Lock.
- Select Sign in to manage Number Lock.
- Re-enter your account credentials.
- Turn Number Lock on.
Google Fi also ties your wireless service to your Google Account, so securing that account is particularly important.
Google recommends enabling two-step verification and adding a recovery email.
Important: If you lose access to your Google Account while Number Lock is enabled, Google Fi cannot provide your port-out information. Make sure your account recovery options are current.
What if you use a smaller wireless carrier?
Smaller carriers may offer similar protections, but the names and procedures vary.
Examples include:
- U.S. Mobile
- Mint Mobile
- Visible
- Cricket Wireless
- Spectrum Mobile
Look for features called SIM Protection, Account Lock, Number Lock, or Port Out Protection.
If you can't find them, contact your carrier and ask two specific questions:
- Can I prevent someone from transferring my number to another SIM or eSIM?
- Can I lock my number against unauthorized transfers to another carrier?
Don't assume that a general account PIN provides both protections.
One more important step: Stop relying on text messages for security codes
Carrier protections can make SIM swapping more difficult, but they don't eliminate the risk.
Another important step is to reduce your reliance on SMS-based two-factor authentication.
Whenever possible, consider these alternatives:
Passkeys: These allow you to sign in using your device's built-in security, such as a fingerprint, facial recognition, or device PIN. They are designed to resist phishing.
Authenticator apps: These generate security codes independently of your phone number. Examples include Proton Authenticator, Google Authenticator, and Microsoft Authenticator.
Physical security keys: These provide another strong option for protecting particularly important accounts.
For accounts that offer these alternatives, they're generally preferable to receiving security codes by text.
What if your phone suddenly loses service?
An unexpected loss of cellular service could have several explanations, including a network outage or technical problem.
But if it happens without explanation, don't simply assume it's a temporary glitch.
Contact your wireless carrier immediately using another phone or a trusted internet connection.
Ask whether someone has requested a SIM change or number transfer on your account.
If you discover an unauthorized transfer:
- Ask your carrier to restore control of your number.
- Change your important account passwords, starting with email.
- Check bank and credit card accounts for unauthorized activity.
- Contact financial institutions if you suspect your accounts have been accessed.
- Report identity theft if appropriate.
Watchdog Takeaway
Your phone number is part of your digital identity. Protecting it deserves the same attention you give to protecting your passwords and financial information.
Take a few minutes to enable your carrier's available SIM-swap and port-out protections. If you have multiple lines, check each one.
Then strengthen the security of your email, banking, and other important accounts with passkeys or authenticator apps wherever possible.
No single security measure guarantees protection. But several simple precautions working together can make it considerably harder for criminals to take over your digital life.
The bottom line: Don't wait until someone steals your phone number to discover how much access it can provide.
Sources and Further Information
Wireless carrier protection
Other wireless carriers
Additional security guidance
KNOW SOMEONE WHO SHOULD SEE THIS?
If this information could help someone you know, share this alert with them.
