The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Act in this order: call your mobile carrier from a trusted phone and reclaim the number; secure your primary email; contact banks and payment services; preserve evidence; then report the identity theft and harden every account that used SMS codes. Speed matters because a hijacked number can receive password-reset messages and one-time codes while an attacker impersonates you.
The first hour: stop the takeover
A SIM swap (also called a SIM hijack) occurs when someone persuades a carrier to move your phone number to a SIM or eSIM they control. A port-out moves the number to another carrier. In either case, your phone may suddenly show “No service,” while the attacker receives calls and text messages intended for you.
- Call the carrier immediately from a trusted phone. Use a family member’s phone, a work line, or a carrier store. Tell the representative that an unauthorized SIM change or port-out occurred. Ask the carrier to reverse it, restore your number, record the exact time of the change, and provide a case number. The Federal Trade Commission’s instruction is direct: “Contact your cellular service provider immediately to take back control of your phone number.”
- Set or reset the carrier account PIN and password. Ask what SIM-change and port-out locks, in-store identification requirements, and notification options are available. Do not reuse a password from any other account.
- Secure your primary email before other online accounts. Email is usually the reset channel for everything else. Change its password from a trusted connection, sign out sessions you do not recognize, remove unfamiliar recovery addresses and phone numbers, revoke unknown third-party apps, and replace SMS-based multifactor authentication (MFA).
- Contact financial institutions. Call banks, card issuers, brokerages, and payment services using a number printed on a statement or shown inside the official app—not a number supplied by a suspicious message. Request a fraud alert on the profile, a review of recent logins and transactions, and replacement or freezing of exposed cards.
- Preserve evidence while you work. Save carrier emails, text messages, timestamps, screenshots, device lists, transaction records, suspicious phone numbers, and every case number. Export messages before deleting anything.
If money is moving, do not wait for the carrier investigation to finish. Ask the financial institution whether a transfer can be recalled or reversed and follow its fraud team’s instructions.
Why a SIM swap can spread so quickly
Many services still send a password-reset link or login code by text message. Once the fraudulent SIM or port-out is complete, the attacker can intercept those messages and sometimes answer calls used for verification. The Federal Communications Commission explains that this can lead to takeovers of financial, email, and social-media accounts.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The incident is uncommon compared with ordinary spam, but complaints recorded by the FCC rose from approximately 300 in 2020 to 400 in 2021 and 500 in 2022, according to the commission’s 2023 figures. Those are complaints, not a count of every incident or a measure of losses.
A sudden loss of cellular service is not proof of a SIM swap—an outage, damaged device, or expired plan can look similar. Treat it as a possible account takeover when it coincides with unexpected password-reset messages, carrier notices, unfamiliar logins, or financial activity.
Secure accounts in the right order
1. Primary email
Change the email password first, using a device and network you trust. Check the account’s security page for active sessions, forwarding rules, filters, recovery addresses, recovery phone numbers, app passwords, and connected applications. Remove anything you did not create. Attackers sometimes add a forwarding rule so they continue receiving reset messages after you change the password.
Recommended Free Tools
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Replace text-message MFA with an authenticator app or a FIDO2/WebAuthn hardware security key. Generate new backup codes and store them offline. If the provider offers “sign out everywhere,” use it after changing the password; then sign in again only on devices you recognize.
2. Banks, cards, brokerages, and payment services
Call each institution’s fraud department through an official channel. Ask the representative to review login history, new payees, changed contact details, transfers, card-not-present purchases, and recently added devices. Freeze or replace cards whose details may have been exposed, and change online-banking credentials from a trusted device.
For an unauthorized wire transfer, the Internet Crime Complaint Center (IC3) says: “Immediately report fraudulent wire transfers both to your bank and to the Internet Crime Complaint Center (IC3) at ic3.gov.” Give the bank the transfer time, amount, destination, recipient details, and any message shown in your account. A prompt recall request may improve the chance of recovery, but no institution can guarantee that funds will be returned.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
3. Password manager and cloud storage
Secure the password manager immediately after email and financial accounts. Change its master password, terminate unknown sessions, and rotate passwords for important services if the vault may have been accessed. Review emergency-access contacts, shared vaults, API tokens, and recovery methods. For cloud storage, inspect sharing links and recently deleted files, then revoke links you did not create.
4. Social, messaging, shopping, and work accounts
Review recent login locations and devices. Remove unfamiliar sessions, recovery methods, connected applications, and administrator accounts. Check direct messages and posts for scams sent while the attacker controlled the account. Tell contacts not to trust payment requests or password-reset messages that appeared during the incident.
5. Cryptocurrency and other irreversible-payment accounts
Move account security away from SMS, revoke unknown API keys, and check withdrawal addresses, transaction history, and address-book changes. Contact the platform’s official support channel immediately if a transfer is unauthorized. Cryptocurrency transfers are often difficult or impossible to reverse, so preserve the transaction identifier and destination address.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Protect your money and identity
Review credit and new-account activity
The Consumer Financial Protection Bureau recommends closing compromised accounts, contacting financial-institution fraud departments, reporting identity theft to IdentityTheft.gov, and using fraud alerts or security freezes. Obtain your free credit reports and look for credit cards, loans, collection accounts, addresses, or inquiries you do not recognize. If Social Security or other identity information was exposed, follow the recovery plan provided by IdentityTheft.gov and monitor for new-account activity.
Credit freeze versus fraud alert
| Option | How it limits new credit | Legitimate-application friction | When it fits |
|---|---|---|---|
| Security freeze | Strongly restricts access to your credit file until you lift the freeze for a specific application or remove it. | You must manage the freeze when applying for credit, including planning a temporary lift. | Best when you want the strongest barrier against new accounts after identity data may have been stolen. |
| Fraud alert | Signals lenders to take extra steps to verify your identity before opening credit; it does not block access to the file. | Usually less disruptive, but a lender may contact you for verification and approval can take longer. | Useful when you want warning and additional verification while keeping applications relatively convenient. |
Neither option closes an existing account or reverses a transaction. Continue checking statements and reports, and keep the confirmation numbers for every request.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Preserve evidence and report the crime
Create a simple incident timeline while details are fresh:
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
- When your phone lost service and when service returned.
- Carrier notices, store locations, representative names, case numbers, and the time the SIM or port change was reversed.
- Password-reset emails, security alerts, unfamiliar device names, IP information, and recovery-method changes.
- Unauthorized transactions, transfer instructions, card numbers, recipient details, and bank claim numbers.
- Screenshots and exported messages showing suspicious phone numbers, email addresses, or links.
Use IdentityTheft.gov to create an FTC recovery plan. Report internet-enabled fraud to IC3 and contact local law enforcement or an FBI field office when the circumstances warrant it. Give investigators copies, not your only originals. Do not confront the suspected attacker or continue communicating through a compromised account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Replace SMS security after recovery
Text-message MFA is convenient, but a successful SIM swap can divert the code. The FBI says, “A physical security key is even better,” when discussing stronger two-factor authentication. Choose the strongest method each service supports, and keep recovery options usable before an emergency.
| Method | Resistance to SIM swaps | Phishing resistance | Recovery and backup considerations | Device support |
|---|---|---|---|---|
| SMS code | Low: the code follows the phone number. | Low: an attacker who captures the code can enter it on a fraudulent site. | Easy to use, but recovery depends on regaining the number; keep an alternate method. | Works with almost any mobile phone that can receive texts. |
| Authenticator app | Higher: codes are generated on an enrolled device rather than sent by text. | Moderate: a user can still be tricked into typing a code into a phishing site. | Protect the app’s backup or transfer feature; store offline backup codes. | Requires a supported smartphone or device with the authenticator installed. |
| FIDO2/WebAuthn hardware key | High against number hijacking because approval is tied to the key. | High: the key checks the legitimate website origin and does not release a reusable code to a look-alike site. | Keep a second enrolled key or offline recovery codes in a secure place; losing every key can make recovery difficult. | Requires a compatible account, browser, and USB, NFC, or other supported connection. |
Enroll a backup key before you need it. Store it separately from the primary key, and test sign-in and account-recovery procedures while you still have access.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesHarden the carrier account and number
- Set a unique carrier-account PIN or password and ask the provider to require it for account changes.
- Ask whether a port-out lock, SIM-change lock, number lock, or in-store identification requirement is available for your plan and region.
- Enable notifications for SIM changes, eSIM activations, port-out requests, profile edits, and password changes.
- Review authorized users and remove anyone who no longer needs account access.
- Keep the carrier’s fraud number and your account number in a secure offline record.
FCC rules require wireless providers to use secure customer authentication before redirecting a number and to notify customers when a SIM change or port-out request is made. Notifications are an early warning, not a substitute for a strong account PIN and non-SMS MFA.
Can a SIM swap drain a bank account?
It can, but the swap alone does not automatically grant access to every bank account. The attacker generally needs your username, password, personal information, or an already compromised email account. The hijacked number then helps them pass text-message verification, reset credentials, add a new payee, or persuade support staff that they are you.
Risk is highest when the same phone number protects email, banking, payment, brokerage, and cryptocurrency accounts; when password reuse exposes several services at once; or when transaction alerts also arrive by text. After recovery, replace SMS MFA on high-value accounts, use unique passwords stored in a password manager, and require transaction alerts through an app or email channel that the attacker cannot control.
Quick Recap
Recovery checklist for the next 30 days
- Confirm that the carrier restored the correct number and that no second SIM or eSIM remains active.
- Check email, financial, cloud, social, work, and cryptocurrency accounts for new sessions, recovery methods, forwarding rules, and connected apps.
- Review bank and card statements daily at first, then at each statement cycle, and report every unauthorized item promptly.
- Pull credit reports and decide whether a freeze or fraud alert matches your risk and upcoming credit needs.
- Keep case numbers, police or IC3 report details, bank correspondence, and carrier records together.
- Test backup MFA and recovery codes without disabling your only working method.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
