SIM swap warning signs and first actions
Distinguish an outage from possible unauthorised SIM or number-transfer activity.
An unauthorised SIM or eSIM change can give someone control of your phone number without stealing the physical phone. Other accounts may also be exposed if they rely on that number for verification or recovery.
Look for a combination of signals
Loss of network service alone does not prove an attack. Check for unexpected SIM activation, porting, carrier-account changes and password-reset notifications. If several signals coincide, do not rely only on restarting the phone. Use another trusted connection to reach your provider.
Give the carrier a precise timeline
Example: service stops immediately after an unrequested eSIM notification. Contact official support and ask about pending and completed changes and the restoration process. Record the loss and restoration times and case references. If financial accounts show suspicious activity, alert the bank in parallel rather than waiting for the SIM investigation to finish.
Reduce dependence on one number
Review the carrier-account password and any available protections for account changes or transfers. For other services, consider supported passkeys or authenticator apps and keep recovery information current. Enabling one protection does not replace reviewing existing sessions and recovery addresses after suspected access. Follow each service’s own guidance rather than a caller’s proposed recovery link.
Quick checklist
- Compare the outage with account notifications.
- Contact the carrier from another connection.
- Notify exposed financial services.
- Review recovery methods and sessions.
Sources and editorial responsibility
Prepared by the KtoTam.to team. Examples are illustrative, not user reports. Number lookups and reviews do not verify a caller’s identity. Check service terms and device instructions with the original provider.
Found an error? Tell our team which guide needs correcting and include a supporting source.
Report a correction