The SIM Swap: When a Parent's Phone Number Is Stolen
The phone suddenly has no service, or texts stop arriving, or a 'your number is being transferred' message appears. That can be a SIM swap: a thief convinced the carrier to move the parent's number to a phone they control. Because the number is how most accounts verify identity, the thief can then reset passwords. This page is the sign, the 60-minute response, and the prevention that stops most swaps before they start.
a phone number is a key, not a detail
The SIM swap 60-minute response
If the parent's service dies without reason, assume the number was taken and act like an account takeover is in progress until proven otherwise: the number is the front door to the accounts.
- The signsService dies for no reasonNo bars or calls failing, a "your number is being transferred" text out of nowhere, texts and calls stopping even though the bill is paid, or accounts suddenly locked with reset codes that no longer arrive.
- Minute 1Call the carrier, freeze the portUse the number on the parent's bill or the carrier's official site and tell them to freeze or reverse the port. Time is the whole game.
- Then money firstMove the money accountsLog into the bank and credit card accounts on a device that does not use the stolen number, change passwords, and call the bank's fraud line, then the email account with a recovery method that is not the phone.
- Prevent the nextCarrier PIN, no codes, app two-factorAdd a free carrier-level PIN or passcode required before any account change, never share verification codes, prefer app-based or hardware two-factor over text codes, and keep recovery codes in the family vault.
The rule, in one sentence: a phone number is a key, not a detail. If the parent's service dies without reason, assume the number was taken and act like an account takeover is in progress until proven otherwise.
What a SIM swap is and why it matters
The SIM card in a phone is what ties the phone to the number. In a SIM swap, a thief convinces the carrier (or an employee) to move the number to a new SIM in the thief's control. The parent's phone loses service, and the thief now receives the parent's texts and calls. That matters because most accounts use the phone number as the reset key: banks, email, and social apps send a verification code by text, and the thief now receives those codes. The number is effectively the front door to the parent's accounts.
The signs it happened
- Service dies for no reason: no bars, calls fail, or the phone shows "no SIM" or "not registered".
- A transfer message out of nowhere: some carriers text "your number is being transferred to another device" before the swap completes.
- Texts and calls stop arriving even though the bill is paid.
- Accounts suddenly locked or reset, especially if the parent cannot receive the reset code anymore.
The 60-minute response
- Call the carrier immediately using the number on the parent's bill or the carrier's official site, and tell them to freeze or reverse the port. Time is the whole game.
- Move the money accounts first. Log into the parent's bank and credit card accounts on a device that does not use the stolen number, change passwords, and call the bank's fraud line. Do the same for any account holding money or personal data. The order matters: see when an account is compromised.
- Reset email with a recovery method that is not the phone. Recovery email, security key, or the recovery codes the provider gave out. See two-factor authentication for what to change to afterward.
- Report it. ReportFraud.ftc.gov, and the carrier's fraud team. If money moved, the bank and IC3 also take reports.
How to prevent it (before it happens)
- Add a carrier-level PIN or passcode. Most carriers let you add a security PIN that must be given before any account change. This is the single most effective prevention and it is free.
- Never share the codes. The read-back scam exists exactly to harvest these: see the code read-back scam.
- Prefer app-based or hardware two-factor over text codes for the accounts that matter most (bank, email). Text codes are the weakest link in a SIM swap. See two-factor authentication.
- Keep recovery codes written down in the family vault: see the family password vault.
Related
- An account was hacked or taken over: the 60-minute response for the account side.
- Identity theft response: when the takeover reaches credit and identity.
- Lost or stolen phone: the adjacent emergency.
- Passwords and accounts: the baseline that makes takeovers harder.
Sources
- FTC: What to Know About Identity Theft (retrieved August 2026)
- Google Support: Recover your hacked or compromised account (retrieved August 2026)
- Apple Support: Account security and two-factor authentication (retrieved August 2026)
Found an error? Report it.