The hack that steals your phone number without touching your phone

You never lose your device, yet suddenly your calls stop, your bank texts go silent, and someone is logging into your accounts. This is a SIM swap — an attack that hijacks your phone number, not your phone. The attacker calls your mobile carrier, impersonates you using leaked personal details (birthday, address, last bill amount), and convinces support to move your number onto a SIM card they control. From that moment, every call and text meant for you goes to them.

Why is that so dangerous? Because so many services treat your phone number as proof of identity. Once the attacker receives your SMS one-time codes, they can complete two-factor authentication and password resets on your email, bank, and social accounts — even though your actual password never leaked. The phone number became the master key.

The fix is to stop relying on SMS for security. Use an authenticator app (TOTP) or a hardware security key, which generate or hold codes on a device you physically possess — a swapped SIM gives the attacker nothing. Add a carrier PIN or port-freeze to your mobile account so a number can't be transferred without a secret only you know, and remove your phone number as a recovery method wherever a stronger option exists.