Some T-Mobile subscribers have been victims of cyberattacks over the years. One such attack is known as a SIM swap, which we have written about several times in the past. In such an attack, a cybercriminal tricks T-Mobile-or another carrier-into issuing them a new SIM card for the victim's phone number, which the bad actor places in their phone.
Watch out for signs that you are the victim of a SIM swap
Immediately, the victim sees a "No Service" notification on his phone, and the criminal swiftly changes all of the passwords and credentials for apps and services. All incoming calls, texts, and SMS-based two-factor authentication (2FA) codes are then routed to the cyberthief's phone, allowing them to intercept all SMS-sent passcodes to lock the victim out of his phone, apps, and accounts.
Victims can have their bank accounts drained in minutes
With the attacker in control of the credentials needed to sign into banking apps, credit card apps, and other sensitive online accounts (including a wireless account), the victim's bank account is quickly drained, new and expensive flagship phones are ordered, new credit card accounts are opened and quickly run up to the max.
There is some good news from T-Mobile
There is some good news, as T-Mobile announced in its Advancing Cybersecurity at T-Mobile report that it has reduced successful SIM swaps by 99% since 2022. When a customer logs into the T-Life app, or asks to make sensitive account changes, the app can request Face ID or Touch ID / Fingerprint authentication instead of relying only on passwords or SMS-sent passcodes.
When visiting a T-Mobile retail store for a new SIM card or device upgrade, the reps request a government-issued ID card (like a driver's license) and scan the barcode on the back to confirm the subscriber's identity before such important changes are made to the account.
T-Mobile monitors for cybercrimes behind the scenes. | Image by T-Mobile
T-Mobile also has a SIM Protection feature that, when enabled, places a hard lock on a T-Mobile subscriber's account. It blocks any attempt to switch a subscriber's active phone number to a new SIM card. It also prevents the activation of a new SIM card profile, whether it is done over the phone with customer service, inside a retail store, or requested online.
At T-Mobile, protecting customers is fundamental to who we are. Our industry connects families, businesses, first responders and communities every day, so the security of our networks is a responsibility that extends beyond any single company. With stakes that high, we couldn’t work at the normal pace. The attackers never stop moving, so our teams skipped the pilots and the multi-year rollouts and moved at a speed most companies wouldn’t try. Today, phishing-related credential compromises among our people are down more than 99%. This report shows what it meant to move that fast, and what we learned along the way.
Jeff Simon, EVP & Chief Information Officer, T-Mobile
Recommended For You
We have mentioned in past stories when it appeared that a carrier's own reps might have been involved in a SIM swap. T-Mobile says that before a team member issues a credential, they must verify who they are with a selfie and a government-issued ID.
Phishing attacks are also down sharply
When scammers send fake texts and emails, and make fake calls that are designed to appear as though they came from a trusted source, it is called phishing. These attacks are supposed to have subscribers respond emotionally to the potential loss of wireless service and other threats.
T-Mobile's new report stated that phishing attacks used to steal account credentials aimed at T-Mobile subscribers were down more than 99%. We haven't written much about SIM swaps lately, so it does appear that T-Mobile and the rest of the Big 3 US carriers have, for now, been able to solve what was once considered an epidemic.
Alan, an ardent smartphone enthusiast and a veteran writer at PhoneArena since 2009, has witnessed and chronicled the transformative years of mobile technology. Owning iconic phones from the original iPhone to the iPhone 15 Pro Max, he has seen smartphones evolve into a global phenomenon. Beyond smartphones, Alan has covered the emergence of tablets, smartwatches, and smart speakers.
A discussion is a place, where people can voice their opinion, no matter if it
is positive, neutral or negative. However, when posting, one must stay true to the topic, and not just share some
random thoughts, which are not directly related to the matter.
Things that are NOT allowed:
Off-topic talk - you must stick to the subject of discussion
Offensive, hate speech - if you want to say something, say it politely
Spam/Advertisements - these posts are deleted
Multiple accounts - one person can have only one account
Impersonations and offensive nicknames - these accounts get banned
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts:
New accounts created within the last 24 hours may experience restrictions on how frequently they can
post or comment.
These limits are in place as a precaution and will automatically lift.
Moderation is done by humans. We try to be as objective as possible and moderate with zero bias. If you think a
post should be moderated - please, report it.
Have a question about the rules or why you have been moderated/limited/banned? Please,
contact us.
Things that are NOT allowed:
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts: