Fake Verizon eSIM Roaming Activation Scam
Criminals impersonate Verizon to send fake eSIM roaming upgrade notifications containing malicious QR codes designed to redirect calls and SMS messages — including two-factor authentication codes — to the scammer's device.
Part of: Fake eSIM & Roaming Scams
Last reviewed: 8 June 2026
Verizon has been rolling out eSIM capabilities across its device range, and customers with compatible handsets receive genuine eSIM onboarding communications from the carrier. Scammers exploit awareness of these real updates by sending fake eSIM activation messages timed to coincide with periods of international travel or new device purchases.
The scam's consequences extend far beyond a compromised mobile account. Because SMS-based two-factor authentication is widely used by banks, email providers, and social platforms, a successful eSIM hijack hands the attacker the ability to reset passwords and gain access to any account that relies on SMS verification.
Verizon's genuine eSIM setup process requires the customer to initiate the eSIM transfer through the My Verizon app or by visiting a Verizon store. Verizon does not send unsolicited eSIM QR codes via email or text — any such message should be treated as fraudulent.
How this scam works on the Verizon brand
The phishing email arrives from a domain like 'verizon-esim-portal.com' and features Verizon's red and black branding. It claims the recipient's plan now includes international eSIM functionality and they must scan a QR code within 72 hours to activate it before their next trip.
Alternatively, a smishing text arrives using Verizon's short-code spoofing: 'Verizon: Your account includes a new international eSIM. Scan the QR at [link] to activate. Offer expires [date].' The link leads to a page displaying the malicious QR code.
Once installed, the fraudulent eSIM profile can intercept incoming SMS on some device configurations, enabling the scammer to bypass SMS-based two-factor authentication on accounts connected to that phone number.
Common red flags
- An email or text arrives unsolicited with a QR code to activate a Verizon eSIM you did not request
- The sender domain is not '@verizon.com' or a verified Verizon subdomain
- The message references an eSIM roaming feature as a 'new benefit' — a benefit activation you did not initiate should always be verified through the My Verizon app before acting
- A countdown timer creates urgency around scanning the code
- After scanning a code, you notice unfamiliar eSIM profiles in your device settings or begin missing expected messages
- Your banking or email two-factor authentication codes stop arriving or you see unexpected login alerts
How to protect yourself
- Never scan an eSIM QR code received unsolicited — initiate any eSIM setup yourself through the My Verizon app or a Verizon store
- Check Settings > Connections > SIM Manager (Android) or Settings > Cellular (iPhone) regularly for unrecognised eSIM profiles
- Enable a Verizon Number Lock via the My Verizon app to prevent unauthorised number transfers
- If you scanned a suspicious code, call Verizon at 1-800-922-0204 immediately to have the eSIM profile reviewed and deactivated
- Switch to an authenticator app (such as Google Authenticator or Authy) for any accounts that support it, removing reliance on SMS codes
- Change passwords on any accounts that use your phone number for two-factor authentication if you suspect eSIM compromise
How to report it
- Report the scam to Verizon at 1-800-922-0204 and request a security review of your account
- Forward suspicious Verizon texts to 7726
- Report the incident to the FCC at consumercomplaints.fcc.gov
- File with the FTC at reportfraud.ftc.gov and the IC3 at ic3.gov if account takeover occurred
Frequently asked questions
What is Verizon Number Lock?
Verizon Number Lock is a free feature in the My Verizon app that prevents your number from being transferred to a new SIM or eSIM without additional verification. It is one of the best defences against SIM-swap attacks.
How can I tell if my number is being used on another device?
You may notice missed calls or SMS that you never received, unexpected alerts from accounts using SMS 2FA, or login notifications from services you did not access. Check your device's eSIM profiles and contact Verizon.
Can Verizon reverse an unauthorised eSIM transfer?
Yes. Verizon can deactivate an unauthorised eSIM profile and restore your number to your physical SIM. Contact Verizon at 1-800-922-0204 as soon as you suspect the problem.