How to prevent a SIM card swap scam
Вставка
- Опубліковано 26 січ 2023
- After a T-Mobile data breach, customers claim they're paying the price and are being targeted by cybercriminals in a sim card scam. Nina Pineda has more on the story.
abc7ny.com/sim-card-phone-sca...
Check out more Eyewitness News - abc7ny.com/
Find us on social media:
FACEBOOK: / abc7ny
INSTAGRAM: / abc7ny
TWITTER: / abc7ny
TIKTOK: / abc7ny
We’re abc7NY, also known as Channel 7 and WABC-TV on TV, home to Eyewitness News, New York’s Number 1 news. We hope you love us on UA-cam as much as you do on television!
NEW TIPS:
Online: abc7ny.com/submit-a-news-tip/2...
Email: abc7ny@abc.com
About WABC-TV: abc7ny.com/about/
#tmobile #news #scam
Seems all providers should be sued for failure to protect one’s account and all attached to it.
We, as a customers, CANNOT prevent a SIM card swap scam, it's the carrier that can, and should. Understand how it happens. Imagine me (Boris) being a victim. The perpetrator just comes to a carrier store, says "hi, i am Boris, this is my number, i've lost my phone, need a new SIM card for another one", and a dude at the store just replies with "$10 please.... here you go". Without ever checking the identity. From now on all your calls and messages go to the new SIM, and if you have it set as one of the MFA methods in your bank, good for wire transfers, you are basically screwed without doing a thing.
The only way to avoid this, is actually to NOT use your phone number (and texts to it) as MFA, but most banks, unfortunately, just don't allow that. Settings up another MFA method won't help, since it usually works in parallel to your phone number, and the important part is text NOT being used as MFA.
The only practical way to protect yourself is to stay alert, and if your mobile service has stopped working, while you definitely did pay your bill and everyone seems to have a good reception, ACT IMMEDIATELY. Also, set up additional alerts on your bank account actions, that go to your email or the bank app (that would remain live on wifi), so you'd know right away about a malicious wire.
What can the customer do? The got the phone number, they can pretend to be the person. Why the service provider just issue a new sim card number with a new telephone number and let the customer to change personal information with other organizations, then there will not be sim card swap scam.
There are two factor authentication methods that cannot be hijacked if a SIM swap scam occurs. For instance, you can use a security key, which is a physical device that is used for authentication. Even if someone gets all your calls/text sent to another phone, they still don’t have the security key and cannot access an account protected with that security key.
I will go into a T-Mobile store and pretend like I lost my phone. See if they would even ask for my ID.
Excellent idea. It is totally the phone companies fault and they should be held liable. There needs to be a class action law suit against the phone companies for allowing this to happen and punitive damages need to be allowed. I have T-Mobile and am now searching for another carrier.
T-Mobile sucks. Switch to another phone company ASAP
Is this why it’s next to impossible to view a full bank account number on any device?
The second /multi factor concept doesn't work once they've taken control over someone's number because it will go to thieves phone, and then they just hit accept!!
fortunately I haven't swapped my old sprint sim card..looks like I'm gonna lose T mobile service but I rather lose it and sign up with another phone carrier...T Mobile is the WORST..
The first anchor woman looks FABULOUS in that pink outfit!
Lol nah. Like a 5/10. You’re just easily impressed, and that’s alright GURRRRRLLLLL
2FA will not work once a hacker successfully SIM swap.. media needs more researching to do
I agree! This is the most idiotic news report about this. The lady reporting on this obviously still does not even understand what a sim swap really is. For example, the part at the 1:20 mark is wrong. The crook is not convincing the carrier to switch the chip to a new device. They are convincing the carrier to link a brand NEW chip to the phone's account, which means they have control of YOUR phone number on their phone. Also, at the very end, when she says experts say to use 2FA, etc., it is very obvious that this "reporter" did not do any research at all. This 2FA is the crux of the problem. Once a crook has your phone number, they can get access to your accounts BY USING 2FA! This is another example of poor news reporting.
With the newer/higher end phones it's optional use a SIM - they have an "eSIM" which is builtin to the phones. I know iPhone 13 as one example I have personally helped someone switch to. Just call tech support with your cell provider and tell them you want to use only the eSIM. Then break the SIM with plyers, throw it away, and you're safe from this scam no matter what. Or Google on how to add the SIM pin if you don't have one. (The default pin is 0000 with Androids apparently, which is needed to set your pin.)
Banking Online is not safe anymore. I have stopped all of it for almost 10 yrs now.
I use cash for most daily spending, which I withdraw directly from my local banks.
I live as if it were the 80's or before .
Cash is now being slowly removed. In a few years we will be a cashless society. It's scary! I only pay with cash.
Changing your password regularly is security theater. It helps nothing
Been happening to me over and over and over
Do not use your cell for banking go to your branch to do your banking😊
Did these two ladies have their banking information on their phone? Big mistake. The thieves still need your login name and password- just your sim isn't enough. Granted that login information is often sold on the dark web.
Use google voice. 👌🏻
Dress too tight girl....😂😂😂😂
Wrong. It's perfect !
don't save passwords on your cell... easy as that
No, that is not what this is about. True, saving passwords on your phone is a bad idea. But sim swapping is where a crook takes over your phone number, then contacts your other accounts (banks, email, social media, etc.) asking for a paswword reset. Then those accounts send a 2FA text/call to the crook thinking it is you because they are calling/texting YOUR number, not knowing that someone has hijacked your actual telephone number.
@@SB-rn4fy it's impossible to do a password reset unless they already have the original password. they won't even bother a simswap unless they have your pw using simple email programs the victims fall prey to.
@@SB-rn4fy you're right, thanks for the info.