SIM-Swap Scams in Serbia
SIM-swap attacks in Serbia target mobile banking users by porting phone numbers to intercept SMS authentication codes for bank and crypto accounts.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
Mobile banking penetration in Serbia has grown rapidly, with all major banks offering active mobile apps protected by SMS-based two-factor authentication. This reliance on SMS codes has made SIM-swap fraud a viable attack vector for criminals willing to social-engineer mobile carrier staff.
Crypto investors in Belgrade and Novi Sad are also targeted, as exchange accounts protected only by SMS two-factor authentication become fully accessible after a successful SIM port.
How this scam works on Serbia
An attacker collects personal information through social media or phishing, then contacts the victim's carrier — Telekom Srbija, A1, or Yettel — posing as the account holder and requesting a SIM replacement. Once the number is ported, passwords for bank and crypto exchange accounts are reset using intercepted SMS codes. Funds are transferred before the victim notices their phone has lost signal.
Common red flags
- Your phone unexpectedly loses signal without apparent cause.
- Bank transaction alerts arrive for transfers you did not initiate.
- You are logged out of your bank app or receive unexpected password-reset emails.
- Your carrier sends a SIM-change notification you did not request.
How to protect yourself
- Contact your carrier to add a PIN or additional security requirement for SIM replacement.
- Migrate bank two-factor authentication from SMS to an authenticator app.
- Use a strong, unique password for your email account.
- Contact your bank immediately if your phone loses service unexpectedly.
How to report it
- Call your carrier immediately to deactivate the fraudulent SIM.
- Call your bank emergency line to freeze affected accounts.
- Report to the Serbian Ministry of Interior cybercrime department.
Frequently asked questions
How can I add extra security to my Telekom Srbija, A1, or Yettel account to prevent a SIM swap?
Contact your carrier's customer service directly and ask about adding a PIN or additional identity verification requirement specifically for SIM replacement requests. This step alone significantly raises the difficulty for an attacker attempting to social-engineer a swap.
My phone suddenly shows no signal — how do I quickly tell if it's a SIM swap or just a network issue?
Try another device with a different SIM to see if the network itself is down in your area; if other phones work fine but yours doesn't, contact your carrier immediately to check for an unauthorised SIM change rather than waiting for service to return.
Should I use a separate phone number just for banking in Serbia?
This can help reduce risk if that number isn't shared publicly, but the more effective step is migrating your bank's two-factor authentication from SMS to an authenticator app, which removes the phone network as a point of failure entirely.
Can Serbian banks help recover funds after a SIM-swap theft?
Speed is critical — contact your bank immediately. Some transactions can be recalled within minutes. File both a bank complaint and a police report, as these are usually both required for any recovery process.