Current:Home > MyOne Tech Tip: Protecting yourself against SIM swapping -Aspire Money Growth
One Tech Tip: Protecting yourself against SIM swapping
View
Date:2025-04-16 18:16:43
NEW YORK (AP) — SIM-swapping is a growing form of identity theft that goes beyond hacking into an email or social media account. In this case, the thieves take over your phone number. Any calls or texts go to them, not to you.
Any protections consumers enabled to secure access to their financial accounts, such as two-factor authentication texts, now can aid attackers and lock out owners.
Experts say these scams will only increase and become more sophisticated, while the data show they are on the rise. The FBI Internet Crime Complaint Center reports that SIM-swapping complaints have increased more than 400% from 2018 to 2021, with associated personal losses estimated to be more than $68 million.
Rachel Tobac, CEO of online security company SocialProof Security, says the numbers are probably a vast underestimate because most identity thefts are not reported.
How does the scheme work?
Criminals use personal information about their victims — phone numbers, addresses, birthdays and Social Security numbers — obtained through data breaches, leaks, dark web purchases or phishing scams to impersonate the victims as they contact their mobile carriers.
They will claim the original phone and SIM card were damaged, lost or sold accidentally and ask for the number to be associated with a new SIM, or eSIM, card in their possession. Once this is done, the phone number belongs to the criminals, along with the ability to receive text messages or calls to verify accounts.
Prevention is the best form of protection, according to cybersecurity experts. The tricks and habits security experts say help prevent SIM-swapping are what they have long been recommending for online security in general. They include the following:
Better password habits
If your credentials are caught in a cyber breach, the hackers could try using the stolen passwords to get into other services to gather the personal data they need to pull off a SIM swap.
If you’ve been using the same or similar login information for multiple websites or online accounts, make sure to change it. If criminals pilfer your password from one service, they can try it on your other accounts and easily get into all of them. If you find it too hard to memorize your various credentials, consider a password manager.
Also use strong passwords that include letters, numbers and symbols. The longer they are, the better. Some experts say they should be 16 characters.
Multifactor authentication without texts
Add biometrics or multifactor authentication apps and devices that do not involve texting. These methods often use separate login methods and encryption that are not tied to your phone’s identity, making them more difficult for criminals to access.
AT&T also advises contacting your carrier to set up a unique passcode to prevent significant account changes such as porting phone numbers to another carrier. Your carrier may already have other protections in place to protect against SIM swapping, so it’s worth calling them to ask.
Watch out for phishing schemes (especially at work)
Criminals will use email or text messages to try to trick you into giving them your personal and financial information or to expose your workplace to possible attacks, and it’s incredibly effective.
In its annual State of the Phish report, the cybersecurity firm Proofpoint found a majority of data breaches across the world still center on human lapses.
If you suspect you have received a possible phishing message or email, report it. Most of the popular email platforms have buttons or functions specifically for reporting phishing attempts. If you’re at work, follow the advice from your company’s information security team.
Steps to take if you’re a victim
All major U.S. carriers have web pages advising victims how to report a SIM fraud.
But an Associated Press reporter, who recently was hit by such an attack, advises that victims should be diligent in working with the carrier to fix the issue. Filing complaints with the Federal Trade Commission, the Internet Crime Complaint Center or with their state attorneys general can possibly expedite recovery efforts.
If card payment numbers were stolen, inform your bank or credit card company, explaining that your card is at risk of fraud and asking the company to alert you to any suspicious activity.
You can also notify credit agencies, including the three main firms: Equifax, Experian and TransUnion. They can freeze your credit, which restricts access to your credit report and makes it hard to open new accounts or issue a fraud alert and will add a warning to your credit report encouraging lenders to contact you before lending money.
veryGood! (555)
Related
- Whoopi Goldberg is delightfully vile as Miss Hannigan in ‘Annie’ stage return
- Gloria Trevi says she was a 'prisoner' of former manager Sergio Andrade in new lawsuit
- At the stroke of midnight, the New Year gives a clean slate for long-elusive resolutions
- 20 Secrets About The Devil Wears Prada You'll Find as Groundbreaking as Florals For Spring
- Rolling Loud 2024: Lineup, how to stream the world's largest hip hop music festival
- 'We'll leave the light on for you': America's last lighthouse keeper is leaving her post
- Our 2024 pop culture resolutions
- Dying in the Fields as Temperatures Soar
- What to know about Tuesday’s US House primaries to replace Matt Gaetz and Mike Waltz
- Bronny James scores career-high 15 points, including highlight-reel dunk, in USC loss
Ranking
- Can Bill Belichick turn North Carolina into a winner? At 72, he's chasing one last high
- Japan sees record number of bear attacks as ranges increase
- Shakira honored with 21-foot bronze statue in her hometown in Colombia
- Orcas sunk ships, a famed whale was almost freed, and more amazing whale stories from 2023
- Whoopi Goldberg is delightfully vile as Miss Hannigan in ‘Annie’ stage return
- See New Year's Eve store hours for Walmart, Target, Costco, Kroger, Publix, Aldi, more
- Bradley women's basketball coach Kate Popovec-Goss returns from 10-game suspension
- Paula Abdul accuses ‘American Idol’ producer Nigel Lythgoe of sexual assault in lawsuit
Recommendation
Elon Musk's skyrocketing net worth: He's the first person with over $400 billion
Russia launches fresh drone strikes on Ukraine after promising retaliation for Belgorod attack
Queen Margrethe II of Denmark Announces Surprise Abdication After 52 Years on Throne
NFL playoff format: How many teams make it, how many rounds are there and more
Whoopi Goldberg is delightfully vile as Miss Hannigan in ‘Annie’ stage return
Olympic host country France sees less New Year’s Eve disorder as it celebrates 2024’s arrival
On New Year’s Eve, DeSantis urges crowd to defy odds and help him ‘win the Iowa caucuses’
Are banks, post offices, UPS and FedEx open on New Year's Eve and New Year's Day?