March 14, 2024, 7:59 pm | Read time: 4 minutes
In what’s known as SIM swapping, fraudsters order a new SIM card in their victims’ names, effectively locking them out of their own number. What was previously limited to traditional SIM cards is now increasingly happening with eSIMs. TECHBOOK explains how the fraudsters operate and how you can protect yourself.
First, the perpetrators take over the victim’s online account with the mobile provider, then they order an eSIM for the phone contract. The unsuspecting victim often unwittingly helps them. The so-called SIM swapping has now also entered the world of eSIMs. Currently, the Lower Saxony State Criminal Police Office (LKA) is warning about this increasingly common scam.
How SIM Swapping Works
In what’s known as SIM swapping fraud or SIM swap, two parties are deceived: the actual victim and the network operator with whom the victim has a contract. First, the fraudsters request a new SIM from the provider. This usually works through the regular customer account. Some network operators allow access to this account by entering a password or using a one-time code sent via SMS.
The criminals obtain this code through a call or message, often posing as a delivery person. To properly deliver a package, they claim, you just need to provide a code sent via SMS. This code is indeed real, as network operators send it to confirm the request for a new SIM card. In the moment, victims often don’t see the sender or make the connection.
Also of interest: Summons from Europol? Beware of this scam
Locked Out of Your Own Account
If you confirm the code at that moment or pass it on to the fraudster, they can log into the customer account and take it over completely–including ordering a new SIM card. With the eSIM, this is particularly easy, as the perpetrators can activate it on their own mobile phones in no time.
The result: The victim’s phone number and contract can be fully utilized by the fraudsters. Sometimes, the affected individuals don’t notice immediately. However, the “old” or original SIM card is usually deactivated as soon as the “new” one is activated. The switch can also have other unpleasant consequences.
Smartphone Stolen? Telekom Warns of This Trick
Why Silent Callers Can Be Especially Dangerous
Why (e)SIM Swapping Is So Dangerous
Nowadays, so much is done via smartphones. Since most people have their devices with them almost all the time, it’s common for many providers to allow verification via mobile phone. Streaming, banking, online shopping–everything runs through the smartphone. Once the fraudsters are in the phone contract, they may also gain access to other user accounts of the victims. Potentially affected are all accounts linked to the respective phone number.
The LKA is aware of a case where criminals used this scam to take over their victim’s email account. The fraudsters discovered that the victim had invested in cryptocurrencies, which they then stole via transfer. Authorities refer to the successful takeover of mobile and email accounts as a “total loss.” In the worst-case scenario, criminals can reset all passwords and transfer all accounts to themselves through the accounts hijacked via SIM swapping.
How to Protect Yourself from SIM Swap
The best way to protect yourself from this scam is with general caution. Scrutinize calls and messages carefully–especially if you’re asked to confirm or enter something. For example, during a call, ask the person on the other end to verify themselves, search for the number online, etc. However, there is now technology that can effectively disguise or even falsify this information.
If you do become a victim of SIM swapping, you can recognize it by several signs:
- Calls and SMS no longer work
- Notifications about changed passwords and activities on new devices
- Blocked access to accounts
Victims should inform providers and services about the identity theft as quickly as possible. If you haven’t been completely locked out of your accounts, change all access data and ensure that the perpetrators haven’t already set up alternative email addresses for verification.
The LKA also advises thoroughly checking all relevant accounts and documenting the process. This helps ensure that no details go unnoticed. Afterwards, you should go to the local police with screenshots of messages and any other potentially relevant documents, such as bank statements, to file a report.
Have you been a victim of eSIM swapping? Share your experiences with us at redaktion@techbook.de.
With material from dpa.