Portability scam | Learn how to really protect yourself

The well-known mobile phone portability scam has once again circulated on social media. In alerts that have been shared, mainly, on TikTok, influencers report a supposed new wave of cases and give indications of protection to users; the problem is that the main measure pointed out does not exist in the main Brazilian operators.

How to protect my cell phone from intrusions?
How to reduce security risks on personal cell phones at work?

The fraud is well known to those who follow the technology news and aims to circumvent two-step authentication systems via SMS. Using volumes of leaked data, with information such as cell phone number, full name, CPF, affiliation and others, criminals would contact the service providers to request number portability on behalf of the customer, taking possession of it.

The victim would only realize the problem when it is too late, when he notices the zero signal on the cell phone and is no longer able to make calls or use the mobile internet — text messages and protocols can also be sent via telecom, confirming the false portability scam. Fraud can also be perceived by e-mail, with notifications of password changes or account logins, as well as loss of access to applications and social profiles.

–
Feedly: subscribe to our RSS feed and don’t miss any Canaltech content on your favorite news aggregator.
–

Portability scam is usually perceived by the victim after the fraudulent request; block published on social networks as a solution does not exist, but operator rules are already changing to provide greater protection to customers (Image: Reproduction/Felipe Demartini/Canaltech)

It is a nightmare that, according to the videos that run on TikTok, would be solved by a simple measure: call the operator and request the blocking of portability requests by cell phone, so that this operation can only be done in person, in stores. Thus, the chance of someone impersonating the customer would be reduced to zero, since physical documents would have to be presented by the customer at the time of the request. It would be great if it were real.

Portability lock does not exist

According to an investigation carried out by the Canaltech, in at least two of the main operators in the country, the option to prevent portability requests over the phone does not exist. At Vivo, for example, this type of request is not even accepted, with changing a number to another telecom only being possible in person, directly at the store.

Claro, on the other hand, even allows the request to be made by telephone service, which also indicated that it was not possible to request the blocking of this type of request. On the other hand, portability is only carried out after confirmation by the customer, via SMS sent to the number mentioned before the process is started, which would prevent criminals from taking control.

*While blocking portability requests by phone is not possible, operators adopt other security measures, such as requiring confirmation via SMS or requiring requests in person (Image: Freepik)*

This is also the routine standardized by Conexis (National Union of Mobile, Cellular and Personal Telephone and Service Companies). In April, the agency instituted the need for confirmation by text message for all portability requests, whether made in person or through telephone assistance. The message must be answered positively within 30 minutes for the procedure to be confirmed, otherwise it is cancelled.

The process, however, is being rolled out gradually; the idea is to have nationwide coverage, but for now, only numbers with area code 64 are protected. “Telecommunications companies have been improving procedures against fraud continuously, with the portability process also undergoing improvement to become more secure”, pointed out the agency, in a note sent to the Canaltech.

The changes that bring greater protection also meet the legal issue, since according to Matheus Puppe, partner in the TMT, Privacy & Data Protection area at Maneira Advogados, operators can also be held responsible. “Companies that manage personal data must guarantee information security and adopt preventive measures to avoid leaks and scams. Otherwise, they may suffer administrative and judicial penalties.”

According to the expert, such safeguards are also present in the General Data Protection Law (LGPD), which makes companies whose information is used for the application of scams involving portability also have responsibility. “Victims have rights and protections in the context of these scams, but it is also important that they adopt security measures and are proactive to protect themselves”, he adds.

How to protect yourself from the portability scam?

Attention to signals is the main way to ensure cell phone security. Keep an eye out for messages indicating procedures or contacts with the service that have not been made by those responsible for the line, as well as charges on invoices, excessive consumption of mobile internet and other aspects that may indicate the compromise of the account.

If you receive an SMS informing you that a portability request has been made, do not confirm the service and contact the operator in search of clarification. Be aware, also, of calls made on behalf of telecoms, avoiding passing data or making payments by such means, always seeking the official means of service.

*Adopting other security measures, such as secure means of two-step authentication, also helps to prevent fraud even when losing your cell phone to bandits (Image: Caio Carvalho/Canaltech)*

Another important preventive measure is to use other secure two-step authentication methods. Instead of SMS, the ideal is to use authenticator applications or verification through notification on the device itself, so that cloning or improper transfer of the number, as well as a possible robbery or theft of the cell phone, do not put your access codes in hand of criminals.

“If the consumer realizes that he has been the victim of fraud involving portability, he must immediately notify his telephone operator, who has the obligation to block the stolen number and restore the service to the user”, completes Puppe. “It is also essential to register a police report so that the authorities can investigate the case.”

Read the article on Canaltech.

Trending no Canaltech: