If your phone suddenly has no calls, texts, or data, or you received a notice that your SIM was activated on another device, treat it as an active account takeover. Contact your mobile carrier immediately through its official app, bill, or website, recover your number, then secure the carrier account, change exposed passwords, inspect financial accounts, and replace SMS-only authentication on important services.
Why a sudden loss of service can be an emergency
A SIM swap moves your mobile number from your SIM or eSIM to one controlled by someone else. A successful attacker can receive calls, text messages, and SMS verification codes intended for you. The Federal Trade Commission describes the warning signs as a phone that suddenly stops working—“no data, no text messages, no phone calls”—or an unexpected notification that a SIM card was activated on a new device.
Loss of service can have innocent causes, such as an outage or damaged device, but an unrequested SIM activation, carrier email, password-reset notice, or port-out message makes fraud more likely. Do not wait to see whether service returns. The longer another person controls the number, the more time they have to reset email, financial, social, and other accounts that use SMS recovery.
A SIM swap and an account takeover can overlap but are not identical. The number may have been moved through a replacement SIM, an eSIM download, or a transfer to another carrier. Separately, someone may have entered your carrier account or an online account without changing the number. Tell the carrier both what you observed and what you fear happened so it checks each possibility.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
First response: recover the number through your carrier
Use a trusted support route: the carrier’s official app, the telephone number printed on a bill, or the carrier’s website that you type or bookmark yourself. Do not use a number or link supplied in an unsolicited call, text, email, or social-media message. If your phone cannot make calls, use another phone, a trusted person’s connection, or an in-person carrier store if that is the provider’s verified support option.
- Tell the carrier the line may have been transferred without authorization. Ask for immediate restoration of your number and for the incident to be treated as a SIM-swap or unauthorized port-out investigation.
- Ask what changed. Request details about replacement SIM or eSIM issuance, device changes, account-profile edits, and any port-out request. Ask the representative to document the case and give you a case number.
- Ask the carrier to stop further changes while it investigates. The provider may have a temporary fraud hold or other procedure; follow its identity-verification instructions through the verified channel.
- Confirm that calls, texts, and data work again. Test from another phone if necessary. Keep the case number and the time service was restored.
Have your account number, billing information, identification details, and the approximate time service stopped available, but provide them only through the verified carrier channel. Do not create a new account or request a new number as your first move unless the carrier explains why recovery is impossible; changing numbers can complicate access to accounts that still use the old number.
The FTC’s consumer instruction is direct: “If you’re the target of a SIM swap scam, contact your cellular service provider immediately to take back control of your phone number.” FBI guidance likewise puts carrier contact before account cleanup. A password reset by itself cannot stop a live number transfer.
Secure the carrier account after your number is back
Number recovery is not the same as account security. Once the carrier confirms that you control the line, change the carrier-account password and create or reset the separate account PIN or passcode. Do not reuse a password from email or another service.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Ask which protections your provider offers for each kind of transfer. Names and enrollment steps differ by provider, so use the carrier’s current official instructions rather than assuming a feature exists or works in a particular way. Ask the representative to explain how you can verify later that each protection is active.
| Control | What it is intended to stop | What to verify with the carrier |
|---|---|---|
| Account PIN or passcode | Unauthorized customer-service changes and identity checks | How it is set, reset, and required for sensitive requests |
| SIM-change lock or freeze | Moving your number to a replacement SIM or eSIM | Whether it covers physical SIMs, eSIMs, upgrades, and emergency support |
| Port-out lock or freeze | Transferring your number to another carrier | How to enable it, how a legitimate transfer is released, and how alerts are sent |
| Change notifications | Alerts when a SIM change or port-out is requested or completed | Which contact channels receive notices and how quickly they arrive |
These are separate actions. A PIN does not necessarily block a SIM replacement, and a SIM-change lock does not necessarily block a port-out. Ask for both locks if the carrier provides them, and confirm that they are active. The Federal Communications Commission’s 2023 Order FCC 23-95 states: “We require wireless providers to offer all customers, at no cost, the option to lock or freeze their account to stop SIM changes.” The order concerns provider obligations and flexibility in implementation; it does not mean every customer has already activated a lock or that every carrier uses the same menu label.
Ask how a legitimate future upgrade, replacement, or port-out will work while a lock is active. You may need to release a lock before an authorized change, and the release process is a security-sensitive event. Keep the carrier’s instructions and any confirmation messages in your records.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
A SIM PIN on the handset protects access to that particular SIM when the device restarts. It does not authenticate a caller to the carrier, prevent a replacement eSIM, or stop a port-out. Keep it as a device safeguard, but do not treat it as protection for the carrier account.
Protect email and other accounts that can reset everything else
After the number is recovered, start with the accounts that control other credentials. Change the password for your primary email, password manager, cloud account, and any service that can reset your email or financial logins. Then work through accounts that used the compromised number for recovery or SMS verification.
- Use a new, unique password for every account. A password manager can generate and store distinct passwords.
- Review the recovery email address and phone number. Remove details you did not add and replace compromised recovery methods.
- Sign out unknown devices and revoke unfamiliar active sessions, browser tokens, and connected applications.
- Check recent security events for password changes, new two-factor methods, forwarding rules, newly trusted devices, or changed contact information.
- Save backup codes in a secure location that is not the compromised phone number.
- Check whether an attacker created email forwarding rules, filters, delegates, or app passwords that could hide security notices.
Prioritize accounts in this order: the email account that resets other services; any password manager or cloud identity account; financial and payment accounts; work or school accounts; then social, shopping, and other services. This order limits the attacker’s ability to pivot from one compromised login to many.
If you cannot sign in because recovery details were changed, use the service’s official account-recovery page reached from a known bookmark or manually entered domain. Tell the service that a SIM swap or account takeover may have occurred. Never give a caller an authentication code merely because the caller claims to be support. A genuine support representative should not need you to read a one-time code sent to your phone in an unsolicited interaction.
Inspect bank, payment, and credit accounts
Review financial services as soon as the number is under your control. Look beyond transactions: an attacker may first change your phone number, email address, password, trusted device, payees, or transfer limits.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match- Check bank, credit-card, payment, brokerage, and digital-wallet logins for unfamiliar devices and security changes.
- Review transfers, new payees, card-not-present purchases, withdrawals, and loan or credit applications.
- Contact the institution using the number on the back of your card, a statement, or its official website—not a contact detail in a suspicious message.
- State that a SIM swap or account takeover may have exposed the account. Ask the institution to secure access, investigate transactions, and explain any deadline for disputing them.
- For a fraudulent transfer, contact the originating financial institution promptly and keep the representative’s name, case number, and instructions.
Even if you see no unauthorized transaction, ask whether the institution can add stronger authentication, remove an unknown trusted device, and restore your correct contact information. Continue checking statements and security alerts after the initial review because an attacker may have made changes that do not appear as a transaction yet.
The FBI Internet Crime Complaint Center advises victims to reset exposed credentials, contact the originating financial institution about fraudulent transfers, and report suspected account takeover. If Social Security, bank, or card information may have been misused, the FTC directs consumers to IdentityTheft.gov for a tailored recovery plan.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Replace SMS-only verification on high-value accounts
Once an attacker controls your number, text-message codes can go to the attacker. The FTC warns that text-message verification may not stop a SIM swap. For email, financial, workplace, and other high-value accounts, choose a method that does not depend solely on the phone number when the service supports it.
| Method | Strength in a SIM-swap scenario | Planning requirements |
|---|---|---|
| Authenticator app | Generates codes on an enrolled device instead of sending them by SMS | Set up the app before removing SMS, protect the app and its backup, and verify the service’s recovery process |
| FIDO-compatible hardware security key | Uses a physical key and cryptographic authentication, avoiding SMS interception | Confirm that the account supports the key, register a spare where allowed, and store recovery options safely |
| SMS verification | Convenient but exposed when the number is transferred | Use only when stronger choices are unavailable, and keep carrier protections active |
CISA’s Mobile Communications Best Practices Guidance (2025) recommends FIDO-based authentication, and the FTC names an authentication app or security key as alternatives to text-message verification. Support, device enrollment, and fallback recovery behavior are controlled by each online service. A security key is optional and cannot restore a stolen mobile number; carrier intervention remains necessary.
When changing methods, enroll the new authenticator or key first, test it in a private sign-in, download or print the service’s backup codes, and only then remove SMS if the account permits. Keep a second recovery method that is not the affected number, while avoiding an unsecured email address as the sole fallback. If you buy a FIDO-compatible hardware security key, confirm compatibility with every important service and plan how you will access accounts if the key is lost. No particular brand is required.
Preserve evidence and report the incident
Save the carrier’s case number, the time service stopped, screenshots of SIM-activation or port-out notices, account-security emails, chat transcripts, and records of every financial contact. Do not delete suspicious messages until you have recorded their sender, time, and contents; avoid clicking their links. Keep a simple timeline of when service failed, when the carrier restored it, and when you changed each important credential.
Report suspected SIM-swap activity to appropriate law-enforcement authorities and the FBI’s Internet Crime Complaint Center. If identity information may have been used, follow the FTC’s IdentityTheft.gov process. Reports may not restore the number immediately, but they create a record and can help connect related fraud.
Troubleshooting when recovery does not go smoothly
The carrier says there is no problem, but the phone still has no service
Ask the carrier to check both an unauthorized SIM change and an unauthorized port-out. Request escalation to its fraud or account-security team, provide the time of the outage, and ask whether an eSIM or replacement SIM was issued. Test the line after each change and record the result. An ordinary outage should not explain an unexpected activation notice, so mention every notice or security email.
You recovered the number but account-reset emails keep arriving
Secure the primary email first, revoke unknown sessions, change its password, and inspect forwarding rules and recovery details. Then change passwords on dependent accounts. Do not approve unexpected sign-in prompts or disclose codes to anyone contacting you.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
A bank account shows an unfamiliar transfer
Call the institution’s fraud department through a verified number immediately. Ask it to restrict access, investigate the transfer, and tell you what documentation or dispute deadline applies. Preserve transaction records and the institution’s case number.
You cannot use the old phone to receive an authenticator code
Use a previously saved backup code, an already enrolled security key, or the service’s official recovery process. Explain the SIM-swap incident and do not disable remaining protections until another secure method is working.
A caller claims to be the carrier and asks for a code
End the call and contact the carrier through the official app, bill, or website. Do not disclose a one-time code, account password, or PIN to an unsolicited caller. The same rule applies to links and messages promising to restore service.
Recommended Free Tools
Prevent another takeover after the incident
- Keep a carrier account PIN or passcode that is not reused elsewhere.
- Ask the carrier to enable both SIM-change and port-out locks, and confirm how to receive change notifications.
- Reject unsolicited requests for carrier credentials, one-time codes, or remote access. Independently contact the organization through a verified route.
- Use unique passwords and consider a password manager.
- Prefer an authenticator app or FIDO security key for sensitive accounts where supported.
- Keep the phone’s operating system and applications updated.
- Maintain offline access to backup codes and a recovery method that does not rely on the mobile number.
Review these settings after a legitimate phone upgrade or number change. A lock that protects the account today may need to be temporarily released for an authorized change, and you should know how to re-enable it afterward. Treat every unexpected carrier notification as a prompt to verify activity through an independent, trusted channel.
What U.S. rules require—and what they do not guarantee
The Federal Communications Commission’s proceeding titled Protecting Consumers from SIM-Swap and Port-Out Fraud, summarized in 88 FR 85794 (2023), addresses secure customer authentication before a number is redirected, notifications about SIM changes and port-out requests, and account locks for those transfers. FCC Order FCC 23-95 discusses how providers can implement the locks. These materials are U.S.-specific regulatory requirements and do not establish one universal customer-service workflow.
Your carrier may use different names, eligibility rules, verification steps, or release procedures. Confirm the actual status of each lock in your account and keep the carrier’s instructions for a legitimate future upgrade or transfer. Regulatory protections reduce risk, but they do not replace a unique carrier password, careful handling of one-time codes, or stronger authentication on the online accounts tied to your number.
Frequently Asked Questions
What should I do first after a suspected SIM swap?
Contact your mobile carrier immediately through its official app, bill, or website. Ask it to restore your number, investigate any SIM or eSIM replacement and port-out activity, and give you a case number.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Does changing my phone’s SIM PIN stop a SIM swap?
No. A handset SIM PIN protects that particular SIM after a restart. It does not prevent a carrier from issuing a replacement SIM or eSIM, and it does not stop a port-out.
Should I change passwords before contacting the carrier?
No. Recover control of the number first through the carrier. Once service is restored, change the carrier password and then prioritize email, password-manager, financial, and other exposed accounts.
Are SMS verification codes safe after a SIM swap?
Not by themselves. An attacker controlling the number may receive SMS codes. Use an authenticator app or FIDO-compatible security key where the account supports it, and keep secure backup and recovery methods.
What locks should I ask my carrier to enable?
Ask separately about an account PIN or passcode, a SIM-change lock or freeze, and a port-out lock or freeze. Also ask how change notifications work and how to verify that each control is active.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What if I find an unauthorized bank transfer?
Contact the originating financial institution promptly using a verified number. Ask it to secure the account, investigate the transfer, explain any dispute deadline, and provide a case number. Preserve all records.
Where should I report suspected SIM-swap fraud?
Keep your carrier and financial records, report suspected activity to appropriate law enforcement and the FBI’s Internet Crime Complaint Center, and use IdentityTheft.gov if personal identity information may have been misused.
Is a hardware security key required?
No. It is an optional stronger authentication method for accounts that support FIDO. Confirm compatibility, register a spare when allowed, and configure recovery options; a key cannot restore a stolen mobile number.
The Bottom Line
Recover the number through a verified carrier channel first. Then reset the carrier password and PIN, enable both SIM-change and port-out protections if available, secure email and financial accounts, replace SMS-only MFA with an authenticator app or FIDO key where supported, and preserve evidence for reporting.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Say something about this film