A phone number can be moved to a different mobile carrier without the owner’s permission. In a port-out scam, a criminal impersonates the account holder and asks a carrier to transfer the number to a SIM or account they control. That can redirect calls and text messages—including some account-recovery codes. Here is how to reduce the risk and what to do if your service suddenly stops.
- • What is phone number port-out fraud?
- • Warning signs to take seriously
- • Secure your mobile carrier account
- ◦ Set a strong account PIN or password
- ◦ Ask about port-out and SIM-change protections
- ◦ Protect account recovery channels
- ◦ Limit information that helps impersonation
- • Use stronger sign-in methods for important accounts
- • What to do if your number is transferred without permission
- • Frequently asked questions
- ◦ Is port-out fraud the same as SIM swapping?
- ◦ Does losing mobile service prove my number was stolen?
- ◦ Will an authenticator app prevent every account takeover?
- ◦ Should I share a carrier transfer PIN with support?
- • Bottom line
What is phone number port-out fraud?
Number porting is a legitimate process for moving a phone number between providers. Fraud happens when someone obtains enough information to impersonate you and requests the transfer without your consent. A related attack, SIM swapping, moves your number to a replacement SIM or eSIM, sometimes while you remain with the same carrier. The methods differ, but both can put calls and SMS outside your control.
Taking over a number does not automatically give an attacker access to every account. The risk is that some services use phone calls or text messages for sign-in or recovery. A criminal may try to use those flows alongside other information they have. Treat number control as one layer of account security, not as a password by itself.
Warning signs to take seriously
- Your phone unexpectedly loses cellular service, and restarting it does not restore service.
- Your carrier sends a notice about a SIM, eSIM, transfer PIN or number-port request you did not make.
- You stop receiving calls or texts while other people can still reach you through internet apps.
- Important accounts send alerts about password resets, new devices or changed recovery details that you did not initiate.
A service outage can have ordinary causes, so one symptom alone is not proof of fraud. But an unexpected carrier-transfer notice or sudden loss of service is a reason to contact your carrier promptly using its official app, website or a number from a bill—not a link or phone number in an unexpected message.
Secure your mobile carrier account
Set a strong account PIN or password
Use a unique credential for your carrier account and enable any additional account PIN or identity check the provider offers. Do not reuse your email or banking password. Keep the PIN private, and avoid storing it in an unprotected note.
Ask about port-out and SIM-change protections
Carrier features vary by country and provider. Ask whether your account supports a number-transfer lock, port-out PIN, SIM-change lock, number-lock feature or extra identity verification. Turn on the protections available to you, and learn how to remove them safely when you genuinely need to switch providers.
Protect account recovery channels
Secure the email address used to manage your carrier account with a unique password and a passkey or authenticator where available. Review recovery email addresses and devices. If a carrier permits changes through an online profile, protect that profile as carefully as a financial account.
Limit information that helps impersonation
Avoid posting your phone number, address, birth date, account details or travel plans publicly when they are not needed. These details do not prove an attack is underway, but personal information can help someone attempt social engineering. Be wary of callers who ask for a one-time code, password or transfer PIN.
Use stronger sign-in methods for important accounts
Where a service offers a passkey, security key or authenticator app, consider using it instead of SMS as the primary second factor. SMS may still be useful as a backup, but it depends on control of the phone number and can be exposed by SIM-swap or port-out fraud. Keep recovery codes somewhere secure and offline when possible.
Prioritize your primary email, financial accounts, password manager and mobile-carrier login. Review their recovery options now, while you still have access. Do not remove a working recovery method until you have verified that a safer replacement is set up.
What to do if your number is transferred without permission
- Contact your carrier immediately through an official channel and report an unauthorized SIM change or number transfer. Ask it to stop or reverse the transfer and restore your service.
- From a device and connection you trust, secure your primary email and high-impact accounts. Change passwords if there is evidence they may be exposed, revoke unfamiliar sessions and check recovery details.
- Contact your bank or other affected providers through their official apps or numbers if you see suspicious activity. Ask about temporarily securing the account.
- Save carrier notices, account alerts, dates and case numbers. Follow your carrier’s local fraud-reporting process and any applicable consumer-protection guidance.
If you regain the number, do not assume every account is safe automatically. Check sign-in history and recovery settings, and replace SMS-based recovery where a stronger supported option fits your needs.
Frequently asked questions
Is port-out fraud the same as SIM swapping?
They are related but not identical. Port-out fraud transfers a number to another provider; SIM swapping moves it to a different SIM or eSIM, often within the existing provider. Either can redirect calls and SMS.
Does losing mobile service prove my number was stolen?
No. Network outages, device problems and billing issues can also interrupt service. Check for carrier notices and contact the provider promptly if the loss is unexpected or paired with account alerts.
Will an authenticator app prevent every account takeover?
No single method prevents every attack. An authenticator or passkey can reduce reliance on SMS, but you should also use unique passwords, secure recovery methods and review account alerts.
Should I share a carrier transfer PIN with support?
Only enter or provide sensitive account information through a channel you independently verified with your carrier. Do not disclose a one-time code or PIN to an unsolicited caller or message sender.
If a number you used before has been reassigned, read our account-security checklist for reassigned numbers.
Bottom line
Protect both sides of the number: the carrier account that controls it and the online accounts that use it for recovery. Set carrier protections, use stronger sign-in options where available, and respond quickly to an unexpected transfer notice or unexplained loss of service.
