SIM Swap Scams in Turkey
How criminals in Turkey hijack mobile numbers to bypass SMS two-factor authentication and drain bank and crypto accounts.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
SIM swap fraud involves convincing a mobile carrier to transfer a victim's phone number to a SIM card the scammer controls, giving them access to all SMS messages — including one-time authentication codes for banking, email, and crypto accounts. In Turkey, this attack has been used to drain accounts with mobile banking access and to take over crypto exchange accounts.
The fraud relies on social engineering the carrier's customer service staff or exploiting weak identity verification at authorised dealer shops. Victims typically notice the attack only when their phone loses signal, by which time accounts may already be emptied.
How this scam works on Turkey
Fraudsters in Turkey gather personal information about targets through phishing pages, data leaks, or social media. Armed with a name, national ID number, and possibly a utility bill scan, they visit a mobile carrier dealer and claim to need an emergency SIM replacement due to a lost phone.
Once the number is ported, the scammer resets passwords on linked email, banking, and crypto accounts using SMS verification codes that now arrive on their device. Funds are transferred out rapidly — often within an hour — before the victim realises what has happened.
Türkiye's major carriers (Turkcell, Vodafone TR, Türk Telekom) have introduced additional verification steps, but gaps remain, particularly at third-party dealer networks.
Common red flags
- Your phone suddenly shows no network signal for no apparent reason
- You receive unexpected messages about SIM changes or port requests you did not make
- Login attempts or password reset notifications arrive for accounts you are not accessing
- Your online banking app becomes inaccessible or shows an unexpected session
- Carrier texts you about a SIM swap request — contact the carrier immediately
How to protect yourself
- Add a carrier-side SIM lock or PIN with your Turkish mobile provider in person at a store
- Use an authenticator app (not SMS) for two-factor authentication on all financial and email accounts
- Freeze or place a port block on your account at your carrier's official store
- Monitor your phone's signal — unexpected loss of service warrants immediate investigation
- Contact your bank to add additional verbal verification requirements for account changes
How to report it
- Call your carrier immediately — Turkcell 532 444 05 32, Vodafone 542 542 00 00, Türk Telekom 444 1444 — and request an emergency SIM lock
- Contact your bank's fraud line to freeze accounts and reverse any unauthorised transfers
- File a criminal complaint with the Cybercrime Department of the Turkish National Police
Frequently asked questions
How would a scammer even get enough information to convince my carrier to swap my SIM?
Attackers typically gather personal details like your name, ID number, and address from phishing pages, leaked data, or public social media before approaching your carrier. This is why limiting the personal information you share publicly and being cautious with phishing links both help reduce your exposure to this attack.
My phone suddenly has no signal — how do I know if it's a SIM swap or just a network problem?
Try another device or ask someone nearby if their network works normally — if theirs is fine and yours isn't, a SIM swap is a real possibility. Don't wait to find out: call your carrier immediately to check for any unauthorised SIM change, since acting within minutes can limit the damage.
Is SMS-based two-factor authentication still worth using if it can be intercepted by a SIM swap?
It's still better than no two-factor authentication at all, but an authenticator app or hardware security key is significantly safer because it isn't tied to your phone number. Switch your most important accounts — banking, email, and crypto — to app-based authentication where the option is available.
Can I sue a Turkish carrier if a SIM swap leads to financial losses?
You may have grounds for a civil claim if the carrier failed to follow its own identity verification procedures. Consult a Turkish consumer rights lawyer and file a complaint with the Information Technologies and Communications Authority (BTK). Simultaneously pursue a criminal complaint against the fraudster and a banking dispute for any unauthorised transactions.