- The Sim swapping technique is very effective
- The potential damage is considerable
- Some have amassed small fortunes through this method
For the past few weeks, SIM swapping scams have been on the increase and they now particularly target SFR customers. If you are not familiar with this hacking method, know that it starts with a rather classic phishing attempt.
You start by receiving an SMS informing you that a request to change your Sim to eSIM has been launched. You are then invited to go to a site where the scammers ask you to enter your username and password in order to cancel your eSim order.
What are the risks ?
Hackers can then calmly contact SFR customer service and pretend to be their target. They will then ask for a new SIM card, explaining that they have been victims of a theft or have lost their smartphone. The operator sees nothing but fire because the hacker was able to provide him with all the information necessary to certify his identity.
Once they have taken possession of your line, cybercriminals can use it to initiate phishing campaigns. They will also use it to validate the double authentication for remote purchases, which can lead to a significant loss of money for the victim.
How to protect yourself?
In particular, the sharing of sensitive information on social networks should be avoided at all costs. The latter are indeed used to usurp your identity, especially when the scammers come into contact with customer service. You can also use an application for double authentication and not validation via your phone number.
Similarly, it is advisable to be wary of the SMS received. They sometimes contain spelling mistakes or the sending number is very dubious and should alert you.
A giant scam led by a teenager
In 2021, the story of an American teenager hit the headlines. This young American has indeed used the technique of SIM swapping to divert 32 million euros in cryptocurrencies. He had obtained the victims’ one-time password and login codes. Except that the FBI investigators and the Hamilton police quickly detected purchases made with part of the stolen funds.
They then tracked him down via an account on a gaming platform. The hacker was arrested for theft and concealment and then brought before the American courts.
