CryptoGal Glossary
SIM Swap Attack
When an attacker convinces your phone carrier to move your phone number to their SIM card, letting them intercept your text-message codes.
A SIM swap attack is when a scammer takes over your phone number by tricking or bribing your carrier. Once your number is on their device, any text-message code used for two factor authentication comes to them, not you.
How it works
The attacker gathers enough personal information to impersonate you, then contacts your carrier claiming a lost or damaged SIM. If they succeed, they receive your calls and texts. They then reset passwords on your email and exchange accounts using SMS codes as verification.
Red flags
- Your phone suddenly loses all service in a place it usually works.
- Password reset emails you did not request.
How to protect yourself
Use an authenticator app or a hardware security key for two factor authentication on anything crypto related. Ask your mobile carrier to add a port-out PIN to your account.
Related terms