SIM Swap Scams: How They Work and How to Protect Your Accounts

Your phone number has quietly become the key to your digital life — bank OTPs, messenger sign-ins, password resets. That makes it a target.

#How a SIM swap works

1. The fraudster collects your details — name, CNIC/ID number, date of birth — from leaks, social media or phishing. 2. They visit a franchise or call the operator pretending to be you, claiming a lost phone. 3. Your number is moved to **their** SIM. Your phone loses signal. 4. They request password resets and **receive your SMS codes**.

#Warning signs

- Your phone suddenly shows **No service / Emergency calls only** in an area with good signal. - You get a message about a **SIM replacement** you didn't request. - You're logged out of apps unexpectedly. - Friends say they got odd messages "from you".

#Protect yourself

1. **Use authenticator-app 2FA**, not SMS, wherever possible. In Yapie: [set up two-step verification](/blog/two-step-verification-guide). 2. **Don't rely on your phone number alone.** Yapie lets you sign in with a username or email too, and the account isn't lost just because a SIM is. 3. **Ask your operator** about extra verification for SIM replacement. 4. **Guard your ID details** — don't post CNIC photos or share them in chats. 5. **Watch new-login alerts** — Yapie posts them to your Saved Messages.

#If it happens to you

1. Call your **operator immediately** from another phone and block the SIM. 2. Contact your **bank** to freeze transactions. 3. On another device, sign in to your messenger and **end unknown sessions** (Yapie: Settings › Devices), then **change your password**. 4. Warn contacts not to send money to "you".

#Frequently asked questions

What is a SIM swap scam?

Fraud where a criminal gets your phone number moved to their SIM card so they receive your calls and SMS codes.

Does two-step verification stop SIM swaps?

Authenticator-app 2FA does, because codes are generated on your phone rather than sent by SMS.

Can someone take over my Yapie account with my SIM?

Not if you use a strong password and authenticator-app two-step verification. SMS alone isn't enough to bypass them.