SIM Swap Scams on Email
Fraudulent emails impersonate mobile carriers to harvest the personal data scammers need to take over your phone number through a SIM swap.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
A SIM swap begins with information, and email is a prime tool for gathering it. A message posing as your mobile carrier — an 'account verification', a 'plan upgrade', a 'security check' — coaxes out the personal details a scammer needs to convince a carrier to move your number to a SIM they control.
Genuine carriers do not collect verification data through unsolicited email links. Email helps scammers because carrier branding is easy to copy and a single phishing page can capture the account PINs, dates of birth, and security answers that protect your number.
How this scam works on Email
The email, styled as your carrier, asks you to confirm account details, reset a PIN, or verify identity via a link, often citing security or a billing change.
The link leads to a cloned carrier login or form that captures your account credentials, PIN, and personal data. Armed with this, the scammer contacts the carrier posing as you and requests your number be ported to their SIM.
Once the swap succeeds, your calls and texts — including authentication codes — flow to the scammer, who can then breach your banking and other accounts.
Common red flags
- An email posing as your carrier asks you to verify account details or reset a PIN
- A link opens a carrier login or form requesting personal data
- You are asked for your account PIN, date of birth, or security answers
- The sender address does not match the carrier's official domain
- You are pressured to verify quickly for 'security'
- Your phone unexpectedly loses signal soon after responding
How to protect yourself
- Do not enter carrier account details on a page reached from an email
- Access your carrier account by typing the official address yourself
- Set a strong, unique account PIN or port-out lock with your carrier
- Use an authenticator app rather than SMS for two-factor where possible
- Treat a sudden loss of signal as a possible SIM swap and contact your carrier
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Contact your mobile carrier's official fraud line if you suspect a swap
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
How does a phishing email lead to a SIM swap?
The email harvests the account PIN, personal details, and security answers a scammer needs to impersonate you to your carrier and have your number moved to their SIM. Never enter carrier details on a page reached from an email.