What happens after a SIM swap scam and how do I recover?
After a SIM swap, scammers intercept your SMS codes and access accounts that use your phone number for two-factor authentication. Act immediately to regain control.
Last reviewed: 1 August 2026
Explanation
In a SIM swap, a scammer convinces your mobile carrier to transfer your phone number to a SIM card they control — usually by providing stolen personal data to pass the carrier's identity check. Your phone loses signal. The scammer then receives all calls and texts to your number, including the one-time codes sent by your bank, email, or other accounts. Using these codes, they log in, change passwords, and drain or lock your accounts.
The first hour matters most, because the attacker is working through your accounts in priority order — typically email first (to control resets everywhere else), then banking and crypto, then anything resellable. Recovery is a race on the same track: call your carrier from another phone to reclaim the number and have the fraudulent SIM cancelled, then secure your primary email, then your bank via its fraud line. Do the securing from a device you control, since your own phone is offline and the attacker may be watching compromised inboxes for your recovery attempts.
Once the immediate damage is contained, restructure so it cannot repeat: move two-factor authentication from SMS to an authenticator app or hardware key on every important account, remove your phone number as a recovery method where possible, and add a PIN or port-freeze to your carrier account, which most providers offer free. File a police report and a report with your national fraud body — banks and carriers both handle disputes more smoothly when a report reference exists.
Common red flags
- Your phone suddenly loses all signal for no apparent reason
- You receive unexpected account-change notification emails or texts
- You cannot receive calls or texts but others around you have normal signal
- You are locked out of bank, email, or social accounts without trying to log in
What to do now
- Call your mobile carrier from a different phone and report the SIM swap immediately
- Contact your bank's fraud line while you still have access to alternative contacts
- Change passwords and move two-factor authentication from SMS to an authenticator app
- File a police report and report to your national fraud body
Frequently asked questions
How do carriers prevent SIM swaps?
Most carriers allow you to add a PIN or passcode to your account that must be provided before any SIM change. Enabling this free security feature significantly reduces your risk.
In what order should I secure my accounts after a SIM swap?
Carrier first to reclaim the number, then your primary email, then banking and any crypto accounts, then everything else that used the number for codes. Email comes early because it controls password resets for most other services.
How did the scammer pass my carrier's identity checks?
Usually with personal data from breaches and social media — name, address, date of birth, recent numbers dialled — or occasionally via a complicit or deceived store employee. This is why adding a dedicated carrier PIN matters: it is a secret breaches do not contain.