SIM Swap Scams in Lebanon
SIM swap fraud targets Lebanese WhatsApp accounts and any remaining mobile banking functionality, exploiting weaknesses in Alfa and touch carrier authentication.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
In Lebanon, where traditional banking is largely inaccessible, WhatsApp has become a critical communication tool for business and personal finance — including receiving remittances and coordinating crypto transfers. A SIM swap attack therefore compromises not just banking OTPs but the victim's entire digital financial life including WhatsApp Business accounts and crypto exchange authentication.
Lebanon's two main carriers — Alfa (MTC Touch) and touch — are the targets. Because remittance and financial coordination via WhatsApp is common among Lebanese diaspora, a compromised number can enable interception of transfer instructions and social engineering of family members.
The Telecommunications Regulatory Authority (TRA) of Lebanon oversees carriers and can receive complaints about fraudulent SIM replacements.
How this scam works on Lebanon
An attacker collects the victim's Lebanese ID number, address, and personal details from social media or phishing. They visit an Alfa or touch distributor presenting sufficient information to request a SIM replacement, or use inside contacts at carrier offices. Once the SIM is replaced, the attacker receives all SMS OTPs and can access any account linked to the number.
For Lebanese diaspora sending remittances to family in Lebanon, a compromised family member's number enables the scammer to intercept WhatsApp instructions and redirect Western Union or Wise transfer details to a fraudulent account. The genuine family member is unaware until the remittance fails to arrive.
Crypto wallets that use SMS 2FA are particularly vulnerable: attackers access and drain wallets within minutes of completing the SIM swap.
Common red flags
- Lebanese phone loses all signal in an area with normal coverage
- Alfa or touch sends a SIM change confirmation you did not initiate
- WhatsApp logs out unexpectedly across all devices
- Family abroad unable to reach you via WhatsApp when they should be able to
- Crypto exchange sends an authentication code to your number without your request
How to protect yourself
- Set a PIN or password on your Alfa or touch SIM account for replacement requests
- Switch all important accounts from SMS 2FA to app-based authenticators (Google Authenticator, Authy)
- Establish a separate voice-call verification process with diaspora family for remittance instructions
- Limit personal information on public social media profiles
- Contact Alfa (1100) or touch (1190) immediately if your phone loses signal unexpectedly
How to report it
- Call your carrier (Alfa: 1100, touch: 1190) immediately to reverse the SIM port
- Report to the ISF Cybercrime Bureau at cybercrime.gov.lb
- File a complaint with the TRA at tra.gov.lb for carrier-level security failures
Frequently asked questions
How can diaspora Lebanese verify that a transfer instruction really comes from family in Lebanon?
Establish a pre-agreed code word or phrase with family members that must be included in any transfer instruction. A scammer who has taken over a SIM cannot know this code. Alternatively, always confirm large transfers via a separate video call.