Is this SIM swap verification SMS a scam?
Commonly seen since 2023. Last reviewed 2026-06-05.
Check your exact messageExample only - do not act on it
Example only: [bank name placeholder]/carrier: confirm your number port by sharing the code we sent: [code removed]
Why this message is suspicious
- Sharing a port/verification code can let an attacker move your number to their SIM.
- With your number, they intercept OTPs and take over bank and email accounts.
- Carriers don't ask you to text back codes to 'approve' a swap.
What the scammer wants
- Your one-time code (OTP) to authorise a login or payment as you
- Your online banking username and password
- Enough access to move money out of your account
Common variations
- Example only: A SIM change was requested. Reply with the verification code to approve.
- Example only: Verify your identity to complete the SIM upgrade: [code removed]
Red flags to watch for
What to do now
- Don't act on the message or call back the number in it.
- Contact your mobile carrier using the number on their official website if you suspect a SIM-swap attempt, and secure your bank and email with app-based 2FA.
- If anything was shared, contact your bank now and report it to your national authority.
What not to do
- Do not share OTPs, passwords, card numbers, or PINs with anyone.
- Do not tap links or call numbers from the message.
- Do not move money to a 'safe account' - that request is always a scam.
If you already responded
Act quickly - the sooner you respond, the more you can limit. Find the situation that matches what you did:
If you clicked a link: Close the page; don't enter card, login, or codes.If you entered details on it, treat them as compromised and tell your bank.Watch for follow-up 'bank security' calls - those are part of the scam.
If you paid: Call your bank or payment provider immediately using the number on your card or app.Ask them to attempt a recall/stop and to flag your account for fraud.Keep evidence (screenshots, references) and report it officially.
If you shared a code, OTP, or login: Never share a one-time code - your bank will never ask you to read one out.If you shared a code, change your banking password and call the bank now.Turn on app-based two-step verification where possible.
If you only clicked the link but entered nothing: close the page, don't enter anything, and watch the linked accounts for unusual activity. Full steps →
If you entered card details: contact your bank now to freeze the card and dispute charges, then watch your statement. Full steps →
If you shared an OTP or one-time code: the scammer may be logging in right now - change the password, sign out other sessions, and turn on app-based 2FA. Full steps →
If you sent money: contact your bank or payment provider immediately to try to stop or recall it, and report it. Full steps →
If you installed an app / gave remote access: disconnect from the internet, uninstall it, and change key passwords from a different, trusted device. Full steps →
If you shared passport, ID, or KYC documents: watch for identity theft, consider a credit freeze or fraud alert, and keep the evidence. Full steps →
Watch out for a second scam. People who've just lost money are often contacted again by a fake "recovery" service promising to get it back for an upfront fee. Legitimate recovery never starts with a fee paid to someone who contacted you - see recovery scams.
First time dealing with this? Start with the first 24 hours after a scam checklist and how to save evidence.
How to verify safely
Contact your mobile carrier using the number on their official website if you suspect a SIM-swap attempt, and secure your bank and email with app-based 2FA.
How to report it
Report through official channels for your country. Use our scam reporting directory to find the right authority, and never use phone numbers or links from the suspicious message itself. If an official link looks outdated, tell us so we can review it.
Official sources checked
- CFPB - Classic warning signs of fraud and scams High reliability
Government consumer advisory
-
Law-enforcement alert
Reviewed 2026-06-05. See our methodology for how we select sources.
Related pages
- OTP scam
- Smishing (SMS phishing)
- Bank impersonation scam
- What to do if you shared an OTP
- What to do if you shared bank login details
- What to do if you shared your password
Report in your country
Frequently asked questions
What is a SIM swap?
Attackers move your phone number to their SIM to intercept your codes. Never share porting or verification codes.