Investigate a Suspected SIM Swap

    Confirm or rule out the carrier-side hijack before assuming this was a different attack.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 1 min read

    Confirm or rule out the carrier-side hijack before assuming this was a different attack.

    What to do

      • Check carrier app 'Recent activity' or call them: was a SIM swap or eSIM transfer logged?
      • Check email for any 'SIM activated' or 'eSIM transferred' notification
      • Check whether SMS-2FA messages stopped arriving in a specific window
      • Ask people who tried to reach you whether calls went to voicemail unexpectedly

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Financial Recovery