SIM Swap Scams on Email
Fraudulent emails impersonate mobile carriers to harvest the personal data scammers need to take over your phone number through a SIM swap.
Part of: SIM Swap Scams
Last reviewed: 1 June 2026
A SIM swap begins with information, and email is a prime tool for gathering it. A message posing as your mobile carrier — an 'account verification', a 'plan upgrade', a 'security check' — coaxes out the personal details a scammer needs to convince a carrier to move your number to a SIM they control.
Genuine carriers do not collect verification data through unsolicited email links. Email helps scammers because carrier branding is easy to copy and a single phishing page can capture the account PINs, dates of birth, and security answers that protect your number.
How this scam works on Email
The email, styled as your carrier, asks you to confirm account details, reset a PIN, or verify identity via a link, often citing security or a billing change.
The link leads to a cloned carrier login or form that captures your account credentials, PIN, and personal data. Armed with this, the scammer contacts the carrier posing as you and requests your number be ported to their SIM.
Once the swap succeeds, your calls and texts — including authentication codes — flow to the scammer, who can then breach your banking and other accounts.
Common red flags
- An email posing as your carrier asks you to verify account details or reset a PIN
- A link opens a carrier login or form requesting personal data
- You are asked for your account PIN, date of birth, or security answers
- The sender address does not match the carrier's official domain
- You are pressured to verify quickly for 'security'
- Your phone unexpectedly loses signal soon after responding
How to protect yourself
- Do not enter carrier account details on a page reached from an email
- Access your carrier account by typing the official address yourself
- Set a strong, unique account PIN or port-out lock with your carrier
- Use an authenticator app rather than SMS for two-factor where possible
- Treat a sudden loss of signal as a possible SIM swap and contact your carrier
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Contact your mobile carrier's official fraud line if you suspect a swap
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
How would I know if my number has actually been swapped after falling for this email?
A sudden, unexplained loss of cell signal, or a notification that your SIM or account settings changed when you didn't make the change, are the clearest signs. Contact your carrier's fraud line immediately using another phone if you notice either of these.
I entered my carrier PIN on the fake page — should I change it even if nothing seems wrong yet?
Yes, change it as soon as possible by logging into your carrier account through the official app or website, since the PIN may already be in a scammer's hands even if no swap has happened yet. Also consider adding a port-out lock or similar protection if your carrier offers one.
Why do SIM swap scammers specifically target carrier accounts rather than just banks?
Taking over your phone number gives them a way to intercept SMS-based verification codes for many other accounts, including banking and email, making it a single point of access to much more. This is why using an authenticator app instead of SMS for two-factor authentication is particularly valuable.
How does a phishing email lead to a SIM swap?
The email harvests the account PIN, personal details, and security answers a scammer needs to impersonate you to your carrier and have your number moved to their SIM. Never enter carrier details on a page reached from an email.