SIM Swapping

Have you ever heard of SIM swapping or SIM jacking? This is a particularly perfidious phishing scam that has recently emerged. It is in fact identity theft, where the perpetrators take over the phone numbers of their victims and activate these numbers on their own phone. They later use these to access online accounts, bank accounts or social media accounts.

05.10.2022 – The procedure is quite simple: The criminals first obtain the phone number and various sensitive data of their victims, such as address, date of birth, name of mobile phone provider, passwords, etc. They then contact the victim's phone provider. Using the confidential data, it is relatively easy for them to request a new SIM card. This is sent by post to a fake address or even as an electronic SIM card via email.

It is now very easy for the perpetrators to link the new SIM card to their mobile number and then receive text messages on this number or make phone calls via this number. Where things get really bad is when the criminals use their victims' accounts on well-known online platforms and change the passwords. They then unashamedly order goods and services without having to pay for them. In this way the perpetrators can easily gain access to bank accounts and social media accounts too.

What can I do to prevent SIM swapping?

• Make sure your phone provider informs you of all activities relating to your SIM card. Ideally not only with a message on your mobile phone, but also via email or by post.
• Do not disclose any personal information about yourself on social media or internet platforms.
• Use strong passwords on the Internet. Use different passwords on different online platforms.
• Make sure that your operating system is always updated to the latest version. This will enable you to close any security gaps. Install the security updates of antivirus software.
• Never disclose personal information such as credit and debit card numbers, PIN code and passwords. Your bank will never request this data from you - neither by email nor on the phone or at the counter. If you are contacted, you can assume that you are dealing with scammers whose intention is to obtain this data from you