SIM Swap Scams in Austria
Criminals port Austrian mobile numbers to intercept SMS banking OTPs and drain EUR from Austrian e-banking accounts.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
Austrian online banking relies heavily on SMS OTP (one-time passwords) for transaction authorisation. SIM-swap fraud exploits this by convincing carrier staff to transfer a victim's number to a scammer-controlled SIM, enabling interception of banking OTPs and account takeover.
Austrian carriers (A1, Magenta, Drei) have strengthened verification processes, but social engineering remains effective. CERT.at and the Austrian Financial Market Authority have both flagged SIM-swap fraud as a growing e-banking threat.
How this scam works on Austria
Attackers first harvest victim personal data through phishing or data breaches, then impersonate the victim to request a SIM replacement from an Austrian carrier. Once the port completes, the victim's phone loses signal.
The attacker uses the new SIM to intercept SMS OTPs from Austrian e-banking apps (George, MobileBanking by Erste, etc.) and initiates EUR transfers or credit-card applications.
Following the attack, the scammer may impersonate bank fraud staff to delay the victim's response while additional transactions are processed.
Common red flags
- Your phone unexpectedly loses all mobile signal in normal coverage area
- Carrier SMS alerts you to a SIM change you did not request
- Unexpected SMS OTPs arriving for bank transactions you did not initiate
- Bank confirms recent login or transaction from an unrecognised device
- Carrier confirms a recent SIM swap you did not authorise
How to protect yourself
- Add a verbal or PIN-based SIM-lock at your carrier store (A1, Magenta, or Drei)
- Switch from SMS OTP to app-based TOTP or hardware token for banking authentication
- Set low daily transfer limits on your Austrian online banking account
- Contact your carrier and bank immediately if you lose signal unexpectedly
- Enable login and transaction alerts via your banking app
- Report confirmed SIM swaps to CERT.at and cantonal police
How to report it
- Call your carrier's fraud line immediately for an emergency port-freeze
- Contact your bank's 24-hour fraud line
- Report to CERT.at at cert.at and file a complaint with Bundespolizei
Frequently asked questions
How do I add extra protection against SIM swaps on my Austrian mobile account?
Visit your carrier (A1, Magenta, or Drei) in person or through their secure app to add a PIN-lock or verbal password requirement, and consider switching from SMS OTP to an authenticator app for banking.
What should I tell my bank if I think a SIM swap has already happened in Austria?
Explain clearly that you suddenly lost mobile signal and suspect unauthorised SIM activity, and ask them to freeze outgoing transfers and monitor for suspicious logins immediately. Speed of reporting matters more than having every detail confirmed first.
Are Austrian carriers required to verify identity strictly before a SIM swap?
Carriers have strengthened verification processes following fraud pressure, but social engineering of staff remains a known weak point. Don't assume your account is automatically safe — proactively adding a PIN-lock is still worthwhile.
Can Austrian banks reverse SIM-swap-initiated transfers?
Reversal depends on speed. Contact your bank within the first hour of detecting unauthorised activity — the sooner you act, the better the chance of a successful recall through SEPA instant payment frameworks.