SIM-swapping is a growing form of identity theft that goes beyond hacking into an email or social media account
SIM-swapping is a growing form of identity theft that goes beyond hacking into an email or social media account. In this case, the thieves take over your phone number. Any calls or texts go to them, not to you.
Any protections consumers enabled to secure access to their financial accounts, such as two-factor authentication texts, now can aid attackers and lock out owners.
Experts say these scams will only increase and become more sophisticated, while the data show they are on the rise. The FBI Internet Crime Complaint Center reports that SIM-swapping complaints have increased more than 400% from 2018 to 2021, with associated personal losses estimated to be more than $68 million.
Rachel Tobac, CEO of online security company SocialProof Security, says the numbers are probably a vast underestimate because most identity thefts are not reported.
Criminals use personal information about their victims — phone numbers, addresses, birthdays and Social Security numbers — obtained through data breaches, leaks, dark web purchases or phishing scams to impersonate the victims as they contact their mobile carriers.
They will claim the original phone and SIM card were damaged, lost or sold accidentally and ask for the number to be associated with a new SIM, or eSIM, card in their possession. Once this is done, the phone number belongs to the criminals, along with the ability to receive text messages or calls to verify accounts.
