SIM Swap Scams in Austria
Criminals port Austrian mobile numbers to intercept SMS banking OTPs and drain EUR from Austrian e-banking accounts.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
Austrian online banking relies heavily on SMS OTP (one-time passwords) for transaction authorisation. SIM-swap fraud exploits this by convincing carrier staff to transfer a victim's number to a scammer-controlled SIM, enabling interception of banking OTPs and account takeover.
Austrian carriers (A1, Magenta, Drei) have strengthened verification processes, but social engineering remains effective. CERT.at and the Austrian Financial Market Authority have both flagged SIM-swap fraud as a growing e-banking threat.
How this scam works on Austria
Attackers first harvest victim personal data through phishing or data breaches, then impersonate the victim to request a SIM replacement from an Austrian carrier. Once the port completes, the victim's phone loses signal.
The attacker uses the new SIM to intercept SMS OTPs from Austrian e-banking apps (George, MobileBanking by Erste, etc.) and initiates EUR transfers or credit-card applications.
Following the attack, the scammer may impersonate bank fraud staff to delay the victim's response while additional transactions are processed.
Common red flags
- Your phone unexpectedly loses all mobile signal in normal coverage area
- Carrier SMS alerts you to a SIM change you did not request
- Unexpected SMS OTPs arriving for bank transactions you did not initiate
- Bank confirms recent login or transaction from an unrecognised device
- Carrier confirms a recent SIM swap you did not authorise
How to protect yourself
- Add a verbal or PIN-based SIM-lock at your carrier store (A1, Magenta, or Drei)
- Switch from SMS OTP to app-based TOTP or hardware token for banking authentication
- Set low daily transfer limits on your Austrian online banking account
- Contact your carrier and bank immediately if you lose signal unexpectedly
- Enable login and transaction alerts via your banking app
- Report confirmed SIM swaps to CERT.at and cantonal police
How to report it
- Call your carrier's fraud line immediately for an emergency port-freeze
- Contact your bank's 24-hour fraud line
- Report to CERT.at at cert.at and file a complaint with Bundespolizei
Frequently asked questions
Can Austrian banks reverse SIM-swap-initiated transfers?
Reversal depends on speed. Contact your bank within the first hour of detecting unauthorised activity — the sooner you act, the better the chance of a successful recall through SEPA instant payment frameworks.