Our mobile phones have become essential to our daily lives, from staying connected to receiving SMS codes for payments and password resets. Unfortunately, this reliance has also made them a target for criminals who want to hijack our mobile numbers to intercept verification codes. This type of fraud is known as phone porting or SIM swapping. Let’s explore what it is and how you can protect yourself.

What is phone porting and SIM swapping fraud?

• Unauthorised mobile porting: This happens when a criminal impersonates you and transfers your phone number to another telecom provider without your permission.
• SIM swapping: Criminals request a telecom provider to transfer your number to a new SIM card, again pretending to be you.

Once they have control of your number, they can receive your text messages, including any verification codes meant for securing your accounts.

How criminals get your information

Criminals can gather your personal details, such as your name, address, and date of birth, from social media or through phishing emails, fake websites, or fraudulent calls. They may also access your emails stored online (e.g., Gmail), which often serve as a precursor to this type of fraud.

Warning signs

• You suddenly can’t make or receive calls or messages.
• Your phone displays “SOS only” or loses network service unexpectedly.
• You receive unexpected messages about porting requests or changes to your telecom provider.

Tips to protect yourself

• Be cautious of suspicious emails, texts, and calls. Never click on links unless you’ve independently verified their source. Avoid sharing personal information like your full name, date of birth, or account details with unknown or untrusted contacts.
• Limit the amount of personal information you share on social media. The less criminals know, the harder it is for them to impersonate you.
• Use two-factor authentication (2FA) for your accounts. Consider using an authentication app rather than relying on SMS codes, which can be intercepted if your number is compromised.
• Create strong, unique passwords for your online accounts, and change them regularly. A password manager can help you keep track of them securely.
• Regularly clean out old emails stored online, especially those containing sensitive information. This reduces the amount of personal data available in case someone gains access to your email account.

Always remember, your telecom provider is required to get your permission before porting your number and must authenticate your identity. If you encounter any issues, don’t hesitate to lodge a formal complaint with your provider. If necessary, you can escalate the issue to the Telecommunications Industry Ombudsman.

For more detailed advice and support, check out resources like ACMA (Australian Communications and Media Authority) or IDCARE.

By staying vigilant and taking a few extra precautions, you can protect your phone number and keep your personal data secure.

Australian Communications Media and Authority – https://www.acma.gov.au/what-do-if-your-mobile-number-has-been-stolen

IDCARE – https://www.idcare.org/fact-sheets/unauthorised-mobile-porting-sim-swap