Cybercriminals Seize SIM Cards: How to protect yourself and what to do if you become a victim

Cybercriminals Seize SIM Cards: How to protect yourself and what to do if you become a victim

Among the most popular cyber fraud schemes currently used by criminals is the capture of users’ SIM cards. What consequences this may have, what risks one may encounter, and what should definitely not be done were explained by the Cyber Police of Ukraine. 

«This happens either because citizens visit phishing sites by following phishing links or because they publish their numbers on various websites where fraudsters can see and use them, including for their reissue», noted cyber police expert Yevheniy Dorohanov, head of the department for combating crimes in the field of computer systems of the Cyber Police Department. 

How the scheme works

• Criminals contact the mobile operator on behalf of the user,
• claim a supposed loss of the SIM card,
• the operator reissues the card,
• the user’s original SIM card is blocked.

After the SIM card is reissued, the fraudsters authorize it in banking online applications to further withdraw money from the user’s bank account and transfer it to an account they control. 

How to protect yourself

• Be cautious with calls from alleged representatives of the mobile operator. If you receive a call asking for a confirmation code or personal data, do not provide information and end the call immediately. If in doubt, call your operator on the official number.
• If you suspect that your card is being attempted to be reissued — immediately contact the customer service of the mobile operator. Report suspicious actions and block remote SIM card reissues.
• Break the "chain" of fraudulent calls. If you receive calls with suspicious offers or requests to call back — immediately call friends or relatives — this will help break a possible fraudulent scenario.
• Prohibit remote SIM card reissue. You can activate a feature in the mobile operator’s settings or through the contact center that allows reissuing the SIM card only through a personal visit to an official store with the provision of a passport.
• Use a unique number for financial operations. It is recommended to have a separate phone number for banking operations, which is not listed publicly, including in ads, social networks, or messengers.
• Consider switching to contract service or linking a prepaid phone number to a passport. This form of connection provides a higher level of security, as reissuing the SIM card is only possible with personal presence and documentation.

Avoid entering your phone number on websites or online resources that you do not trust. If this happens:

• you may start receiving calls from unknown numbers, a so-called "fraudulent call chain," which can be stopped;
• since fraudsters use the last three numbers that called your phone for SIM reissue, interrupt this "chain" by calling three subscribers you trust;
• the cyber police recommend linking your phone number to a passport, as reissuing the SIM card without the owner’s personal presence at the operator’s office with a passport will be impossible.

The cyber expert added that some mobile operators may charge an additional fee for linking a phone number to a user’s passport, but this service is usually free.

What to do if you become a victim of fraud

• Immediately contact the mobile operator and report the reissue of the SIM card without your knowledge. Request to temporarily block the number.
• If you suspect that fraudsters have gained access to your bank account — contact the bank and block the cards and online access.
• Check access to your social media accounts and email. If you suspect a breach — change the passwords.
• If fraudsters gained access to your accounts — inform friends and acquaintances so they do not fall into the fraudsters’ trap (for example, if the fraudsters ask for money on your behalf).
• Contact law enforcement with a fraud report or submit an electronic complaint to the cyber police via the link.