SIM-Swap Scams in Serbia
SIM-swap attacks in Serbia target mobile banking users by porting phone numbers to intercept SMS authentication codes for bank and crypto accounts.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
Mobile banking penetration in Serbia has grown rapidly, with all major banks offering active mobile apps protected by SMS-based two-factor authentication. This reliance on SMS codes has made SIM-swap fraud a viable attack vector for criminals willing to social-engineer mobile carrier staff.
Crypto investors in Belgrade and Novi Sad are also targeted, as exchange accounts protected only by SMS two-factor authentication become fully accessible after a successful SIM port.
How this scam works on Serbia
An attacker collects personal information through social media or phishing, then contacts the victim's carrier — Telekom Srbija, A1, or Yettel — posing as the account holder and requesting a SIM replacement. Once the number is ported, passwords for bank and crypto exchange accounts are reset using intercepted SMS codes. Funds are transferred before the victim notices their phone has lost signal.
Common red flags
- Your phone unexpectedly loses signal without apparent cause.
- Bank transaction alerts arrive for transfers you did not initiate.
- You are logged out of your bank app or receive unexpected password-reset emails.
- Your carrier sends a SIM-change notification you did not request.
How to protect yourself
- Contact your carrier to add a PIN or additional security requirement for SIM replacement.
- Migrate bank two-factor authentication from SMS to an authenticator app.
- Use a strong, unique password for your email account.
- Contact your bank immediately if your phone loses service unexpectedly.
How to report it
- Call your carrier immediately to deactivate the fraudulent SIM.
- Call your bank emergency line to freeze affected accounts.
- Report to the Serbian Ministry of Interior cybercrime department.
Frequently asked questions
Can Serbian banks help recover funds after a SIM-swap theft?
Speed is critical — contact your bank immediately. Some transactions can be recalled within minutes. File both a bank complaint and a police report, as these are usually both required for any recovery process.