Protecting your phone number
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 6 min
In short
A SIM swap is someone impersonating you to your mobile carrier to take over your line. With your number, they receive your SMS codes and pass phone-based identity checks. Move your authentication off the phone number, and add a PIN or lock on the carrier account itself.
Key points
- SMS authentication depends on the number, so it falls the moment the line is taken
- Most carriers let you set a PIN or restrict account changes on the contract
- A sudden and persistent loss of signal or calling ability is an early sign
- Not talking publicly about your holdings is the best way not to be picked as a target
Definition
Abusing a mobile carrier's process to move a victim's phone number onto the attacker's SIM, thereby defeating SMS codes and phone-based identity checks.
A SIM swap is not a technical attack but a social one. The attacker assembles your name, date of birth, address and account details from social media and leaked data, then walks into a shop or calls the support line saying they lost their handset and need a replacement SIM. If it goes through, your phone drops off the network and your number comes alive in their hands — followed by password resets, SMS codes and a drained account.
So the first move is to stop depending on the number. Switch two-factor authentication on your exchange, email and password manager from SMS to an authenticator app or a hardware security key. Then hunt down every place where your phone number is registered as a recovery method and remove it where you can. Where a service offers nothing but SMS, it is reasonable simply not to keep a large balance there.
Hardening the carrier account helps too. Most carriers offer a PIN on the contract, stricter in-store identity checks, or a block on online SIM reissue and handset changes. The names and availability differ between providers, so check your own carrier's settings page or support documentation for what you can enable.
Above all, avoid being chosen. A SIM swap takes effort, so attackers pick people they are confident hold assets. Posting your portfolio size, your profits or your coins; putting your real name and employer in your profile; pasting a wallet address in public — each of these makes you an easier pick. If you notice the warning signs (an abrupt and lasting loss of service, authentication emails you did not trigger), call your carrier from another line and, in parallel, start the process of freezing your exchange account and suspending withdrawals.
Watch out for
- · If your line dies unexpectedly, contact your carrier and your exchange by some other means immediately
- · Callers posing as your carrier will ask for your PIN — hang up and call the official number yourself
- · Consider simply not keeping a large balance at a service that offers only SMS as a second factor
Frequently asked questions
Is a low-cost SIM or an eSIM safer?
It depends less on the contract type than on how strictly that provider runs identity checks and reissues. Either way, the reliable fix is to stop depending on the number for authentication at all.