How to Avoid SIM-Swapping - Leaflet

EUROPEAN UNION AGENCY FOR CYBERSECURITY

How to avoid

MOBILE SIM SWAPPING?

WHAT IS A SIM SWAPPING ATTACK?

In a SIM swapping attack, an attacker takes over your mobile phone number by asking the mobile telecom provider to link your number to a SIM card under the attacker’s control.

1 2 3

Collect victim’s personal data Carry out the fraudulent SIM swap Exploit the swapped SIM

Via phishing, data breaches, In-store, contacting company's The fraudster receives calls or messages social media searches, malware representative over the phone or addressed to the legitimate user to make online through the provider's app or bank transactions and accessing email portal accounts, sites and social media

WHAT ARE THE WARNING SIGNS? HOW TO PREVENT THE ATTACK?

Before the attack: You receive strange phone calls Avoid providing any personal information to asking you to share codes or SMS messages that you have someone pretending to be representative of the received from your mobile telecom provider. telecom provider. During the attack: Your phone loses network connection Never communicate, over the phone, the one-time for a longer period, and you are not able to make or passwords you receive from your mobile operator. receive phone calls. Choose app-based 2-factor authentication, instead After the attack: You may see suspicious transactions in of two-factor via mobile phone or SMS. your banking accounts, or lose access to your social media Be cautious with the personal information that you or email accounts, or see other activity you do not recognize. share on websites and social media. Do not open suspicious hyperlinks or attachments received through email or SMS

WHAT TO DO IF YOU ARE A VICTIM?

If you experience any of the above signs, ccontact your telecom provider as soon as possible. If it confirms the SIM swap, immediately contact your bank and change the passwords to your online accounts.

Furthermore, report the fraudulent activity to the police.

www.enisa.europa.eu