SCAM LIBRARY · PHISHING & LINKS
The SIM-swap account takeover
A scammer tricks your phone carrier into switching your phone number to a device they control, letting them hijack your online accounts.
Documented by the FTC & FBI IC3 · reviewed 2026-07-07
How it works
The scammer contacts your mobile carrier pretending to be you, claiming they've lost their phone or need to switch to a new one. Once they succeed, your phone stops working, and they use the brief window to reset passwords on your email and financial accounts. You may not realize what happened until you can't access your accounts or receive important messages.
What it can look like
You notice your phone has no service. You call your carrier to report it, and customer service says your number was already transferred to another device just hours ago—something you never did. By then, someone has already reset your email password and is accessing your bank account.
Red flags
- Your phone suddenly loses service without warning.
- You receive emails about password resets or account changes you didn't make.
- Your carrier tells you your number was transferred to a different phone.
- You can't access email or online banking, even though you know your passwords.
- Friends or family say they're getting odd messages supposedly from you.
What to do
- Contact your mobile carrier immediately and ask them to secure your account with extra authentication requirements or a PIN that only you know.
- Change passwords on your email and financial accounts from a secure device, and enable two-factor authentication (not just SMS text codes).
- Report the incident at reportfraud.ftc.gov so authorities can track these schemes.