Sim Swap Scams

Scammers obtain enough information from social media profiles to perform a SIM swap, then use the hijacked number to reset passwords and access bank, email, and social media accounts.

Victims receive an SMS asking them to confirm a SIM swap by replying with an OTP or pressing a link. Responding gives scammers control of the number and access to banking OTPs.

Fraudsters gather personal information through phishing or data breaches, then convince a mobile network to port the victim's number to a new SIM. They intercept banking OTPs and drain accounts within minutes.

After taking over a victim's number, scammers use intercepted OTPs to authorise large transfers and new beneficiaries on banking apps. Victims often only notice when their phone loses signal.

Fraudsters pose as mobile network agents doing RICA verification and ask for ID documents and photos. The information is used to commit identity theft and facilitate SIM swaps.