Greg's Corner

SIM Swapping Scam Can Happen to Anyone

By Greg Collier

The convenience of managing our finances and communications through smartphones comes with significant risks. One of the most insidious threats is SIM swapping, a scam that has left countless victims, including a California resident who recently lost $38,000, in financial turmoil. This incident is a reminder that no one is immune to such scams, and protecting oneself requires awareness.

SIM swapping occurs when a scammer tricks a mobile carrier into transferring a victim’s phone number to a device they control. This doesn’t require physical access to the victim’s phone. Armed with basic personal information, often gathered through online sources or data breaches, fraudsters impersonate the victim to convince the carrier to make the switch.

Once the fraudsters gain control of a phone number, the possibilities for exploitation are vast. They can intercept calls and texts, including the two-factor authentication (2FA) codes that are often the last line of defense for financial accounts. This allows them to bypass security measures and initiate fraudulent transactions. Alarmingly, this scam isn’t limited to traditional SIM cards as eSIM technology, which doesn’t rely on a physical SIM, is just as vulnerable.

The victim in this recent case described the harrowing experience of losing access to his phone and, subsequently, his financial accounts. It started with strange notifications and the sudden inability to connect to his cellular network. Soon after, three wire transfers drained his account of $38,000, funds meant for essential living expenses. Despite reporting the fraud, the initial response from his bank denied his claim, citing a confirmation sent via text, a text the victim never received because his phone number was compromised.

The frustration and helplessness in such scenarios can be overwhelming. Even after the bank reopened the case, uncertainty loomed about whether the funds would ever be recovered.

According to the FBI, SIM swapping scams affected over 1,000 victims in 2023, resulting in more than $48 million in losses. The alarming aspect of this scam is that victims don’t need to interact directly with the fraudsters. By leveraging personal information available online, names, addresses, and other seemingly innocuous details, scammers can bypass many security measures.

This underscores the importance of adopting robust security practices that go beyond traditional protections. Simple measures like setting up a PIN for mobile accounts or using app-based authentication for 2FA can make a significant difference.

The first step in mitigating the risk of SIM swapping is awareness. Recognize that this scam can target anyone, regardless of the type of phone or SIM technology they use. No phone is inherently safe from this attack, and assuming invulnerability can lead to complacency.

Strengthening your defenses begins with securing your mobile account. Many carriers offer the option to set a unique PIN or passphrase that is required for account changes. Additionally, wherever possible, replace text-based 2FA with app-based authentication tools, which are less susceptible to interception.

Being mindful of the information you share online is also critical. Social media profiles and public records can provide scammers with the details they need to impersonate you. Regularly monitor your financial accounts for unusual activity and act quickly if you notice anything suspicious.

If you fall victim to a SIM swapping scam, report it immediately to your mobile carrier and financial institutions. Additionally, filing a complaint with the FBI’s Internet Crime Complaint Center (IC3) can aid in tracking and combating this growing threat. While recovery may take time, persistence and proper documentation of the fraud are essential.

SIM swapping is a sobering example of how our reliance on technology can be exploited. By staying informed and implementing strong security measures, individuals can reduce their vulnerability to these devastating scams. This is a collective battle, and vigilance is our best defense.