Treat SMS as compromised even after the number is back.
What to do
- Switch every account possible to authenticator-app or hardware-key 2FA
- Use a separate unpublicised number for bank verification where supported
- Add a port-freeze and 'no telephone changes' flag on the carrier account
- Report the swap to the carrier fraud team and your national telecom regulator
- Freeze your credit report — SIM-swap victims are commonly hit again with identity fraud
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers