There is a fraud technique that requires no malware, no hacking, no physical access to your device, and no technical skill whatsoever. It simply requires a convincing story told to a mobile network customer service agent. And it has emptied bank accounts worth hundreds of millions of naira across Nigeria and beyond. It is called SIM swap fraud, and most bank customers have never been warned about it.
Your entire financial life — every OTP, every password reset, every bank alert — travels through your phone number. Whoever controls that number controls your money.
How the Attack Unfolds
A fraudster who has gathered enough personal information about you — your full name, your date of birth, your ID number, and sometimes just your network provider and the numbers you call most frequently — calls your mobile network's customer service line or walks into an agent outlet. They claim to be you and report that they have lost their SIM card. They request a SIM swap to a new card they already have in their possession.
Customer service agents at many networks will process this request after basic identity verification. Once the swap is approved, your phone number is transferred to the fraudster's SIM. Your phone displays no network. Every OTP, bank alert, and verification code now goes to the criminal.
The Speed of the Damage
With your phone number in their control, a fraudster can:
Reset your mobile banking app password using the OTP sent to your number - Authorize transfers to external accounts - Reset your email password and use it to access other financial platforms - Change your registered details on banking platforms to lock you out permanently
All of this is possible within twenty to thirty minutes of a successful SIM swap.
How to Protect Your SIM
Visit your network provider's official office and request a SIM swap lock or account PIN that must be verified before any SIM-related changes can be processed - Ask specifically whether your network supports in-person ID verification requirements for SIM swaps - Switch all your critical two-factor authentication to an authenticator app rather than SMS - Regularly check that your phone is receiving network signal — an unexpected signal loss is an emergency signal
If Your Phone Loses Signal Unexpectedly
Do not assume it is a network issue and wait. Treat it as a potential SIM swap immediately.
Call your bank from another phone right away and freeze your account - Call your network's fraud line and report a suspected SIM swap - Change your email password from a different device immediately
Conclusion
SIM swap fraud is one of the most devastating and least discussed forms of financial crime. The protection is simple but must be set up before an attack happens. Secure your SIM today, before someone else does it for you.
Get new Security & Fraud alerts
One email when a new security & fraud article like this one goes live. No spam, unsubscribe anytime.
