The F.B.I. has issued a warning about the growing number of “SIM swap” scams that essentially steal someone’s cellphone number to hack their personal data. In 2021 alone, the FBI received 1,611 SIM-swapping complaints, with adjusted losses totaling more than $68 million.*
A “SIM swap” scam occurs when a criminal acquires a mobile phone’s SIM card from an unknowing victim to steal personal information such as “bank accounts, virtual currency accounts, and other sensitive information,” according to the public service announcement from the FBI.
In many instances, criminals will use phishing techniques to obtain personal information about the victim. Then they use this information to impersonate the victim to their mobile carrier and subsequently, switch the victim’s phone number to a different SIM card.
Here is how you can protect yourself from SIM swap scams:
- Don’t advertise information about your financial assets, including the ownership or investment of cryptocurrency, on social media websites and forums.
- Don’t share your mobile number account information over the phone to representatives that request your account password or pin. Instead, verify the call by dialing the customer service line of your mobile carrier.
- Avoid posting personal information online, such as your mobile phone number, address, or other personal identifying information.
- Use a variation of unique passwords to access online accounts.
- Use strong multi-factor authentication methods, such as biometrics, physical security tokens or standalone authentication applications to access online accounts.
- Don’t store passwords, usernames, or other information for easy login on mobile device applications.
If you suspect that you’re a victim of SIM swapping:
- Contact your mobile carrier immediately to regain control of your phone number
- Access your online accounts and change your passwords.
- Contact your financial institutions to place an alert on your accounts for suspicious login attempts and/or transactions.
- Report information concerning all suspicious activity to your local law enforcement agency or your local FBI field office.
- Report the activity to the FBI’s Internet Crime Complaint Center.