SIM-swap fraud and bank accounts: warning signs and action
A SIM swap can give a criminal control of calls and text messages sent to your mobile number. If your phone suddenly loses service for no clear reason and banking or email security depends on SMS codes, treat that as a security incident rather than merely a network fault.
If you suspect a SIM swap, contact your mobile network and bank using trusted contact details, secure the email account linked to your banking, and review recent payments and security changes. Do not wait for an unauthorised transfer to appear before acting.
Treat sudden loss of mobile service as a security signal
A SIM swap does not necessarily involve stealing your physical phone. The criminal’s aim is to persuade or trick the mobile provider into activating your number on another SIM or eSIM. Your own handset may then lose calls, texts or mobile data even though Wi-Fi still works. That sudden loss of service is particularly important if you did not request a new SIM, port your number or change provider.
One missed text is not proof of fraud, and networks do have outages. The useful test is context. If the phone loses service and at the same time you receive password-reset emails, banking alerts, unfamiliar login notifications or messages about a replacement SIM, assume the risk is real until the provider confirms otherwise.
Sudden loss of mobile service can be an early warning, especially if it appears without a known network outage or account change. Use another phone or internet connection to contact the mobile provider through a known channel and ask whether a replacement SIM, eSIM or account change was requested.
Practical security drill: write a three-step response for SIM-swap fraud affecting bank access before an incident occurs. Step one is to stop the risky channel; step two is to contact the bank or provider through a known route; step three is to review changes and transactions. Note the exact time and keep screenshots or reference numbers. If a suspicious event happens at 14:10, a timestamped sequence is far more useful than remembering later that something happened “in the afternoon”, especially if several accounts or devices are involved.
Secure the mobile number, email and bank through known channels
Many account-recovery journeys begin with email. If a criminal controls both the phone number and the inbox, they may be able to reset passwords, intercept warnings and hide confirmation messages. That is why the response should not be limited to the banking app.
From a device you trust, change the email password to a new unique one and turn on strong two-step verification that does not rely solely on the compromised mobile number where possible. Review recovery addresses, forwarding rules and logged-in devices. A SIM-swap incident can become much more damaging if the attacker has quietly added their own recovery method to the email account.
Use the mobile provider’s official website, app, a number printed on a bill, or another trusted channel. Ask whether a replacement SIM, eSIM activation or number-port request has been made and ask the provider to secure the account. Then contact the bank using the number on the back of the card, the bank’s official app or website, not a number supplied in a suspicious text or email.
Tell the bank that you suspect a SIM swap specifically. That detail matters because it explains why SMS codes or phone-based verification may no longer be trustworthy. Ask the bank to review recent logins, new payees, password or contact-detail changes and outgoing payments, and to explain what temporary restrictions it recommends.
Secure the email account that can reset banking passwords. Change credentials from a trusted device, review forwarding rules and recovery details, then contact the bank independently. Do not rely on text messages while the mobile number may be under someone else’s control.
Review account changes before looking only for missing money
Attackers may first change an address, phone number, email address or device registration, then wait before moving money. Review the profile and security areas of your bank, savings, credit-card and investment accounts. Also check whether new beneficiaries or standing orders have been created.
Build a short timeline while the events are fresh. For example: service lost at 14:10; password-reset email at 14:24; bank alert at 14:31; network contacted at 14:42. If money later disappears, that timeline gives the bank and mobile provider a much clearer picture than a general statement that “my phone was hacked”.
If you see an unauthorised card payment or bank transfer, tell the payment provider as soon as possible and ask what fraud process applies. If you were manipulated into authorising a UK Faster Payment or CHAPS transfer to a fraudster, different APP-scam reimbursement rules can apply, including eligibility conditions and claim limits. The bank needs the exact payment method and circumstances to assess the case.
Do not let a caller who claims to be the bank “help” by moving the remaining balance to a safe account. A genuine fraud investigation does not require you to transfer money to a new account supplied during an unexpected call. End the call and reconnect independently.
Look for account changes as well as missing money: new payees, changed phone number or email, password-reset notices, device registrations and card-wallet additions. Record times and screenshots. Those changes can show the compromise path even before an unauthorised transfer appears.
Report unauthorised payments and harden recovery routes
Use a strong unique password on the mobile-network account and any extra account PIN the provider offers. Keep banking and email recovery details current, and use app-based or hardware-backed authentication where appropriate instead of making SMS the only recovery route. Keep the phone operating system and banking apps updated.
Also make sure you can contact your bank if the phone itself becomes unusable. Know where the physical card is, keep the bank’s official fraud number accessible somewhere other than the handset, and do not store every recovery code only in the same phone. Resilience is part of security: the goal is to remain able to lock down accounts even when the normal device or number is compromised.
Does losing mobile signal always mean a SIM swap?
No. Network faults happen. It becomes more concerning when the loss of service is unexplained and coincides with security alerts, password resets or an unexpected SIM or port request.
Should I contact the bank even if no money has left?
Yes if you have credible signs of account compromise. The bank may be able to review security changes or place temporary controls before a fraudulent payment occurs.
Is changing my banking password enough?
Not necessarily. Secure the email account, mobile-network account and any other financial accounts linked to the same phone number or recovery email as well.
If money has moved, report the transaction promptly and keep the bank and mobile-provider case references together. After control is restored, strengthen recovery methods, use a carrier account PIN where available and remove unnecessary SMS-based recovery options from important accounts.
Sources and verification
Victoria Hughes - Consumer Rights Specialist
I treat a mobile number as an identity credential, not just a way to receive calls. A SIM-swap attack becomes dangerous when that credential is combined with an email password or other stolen personal information. If service disappears unexpectedly, I would not spend hours rebooting the phone before checking with the network. Use another device, confirm whether a SIM change occurred, then secure email and banking in parallel. Email gets special priority because it often controls password recovery for everything else. I also prefer authentication methods that do not rely solely on SMS when a service offers a stronger alternative. During recovery, be suspicious of anyone who calls 'to help' and asks for codes. A real incident creates perfect cover for a second scammer to sound believable. Finally, keep a small offline list of official emergency contact routes. Security plans that exist only inside the phone are least useful at the exact moment the phone number has been taken away from you. My recovery checklist extends beyond the bank because the number may have been the reset key for many services. Regaining signal is the start of cleanup, not proof that every account the attacker touched has automatically become secure again.
MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.