Full bars one minute. “No Service” the next — while everyone else in the room stays connected. Most people assume a network glitch and wait it out. That fifteen-minute wait is exactly the window a SIM-swap attacker needs.
A SIM swap moves your mobile number onto a different SIM card. There are legitimate reasons this happens — a lost or damaged SIM, for one. It becomes fraud the moment someone else causes that move without your permission. Once they control your number, calls and texts start reaching their SIM instead of yours — including every SMS login code standing between an attacker and your accounts.
How the Attack Actually Starts
The fraudster first collects personal information — through phishing, social media, leaked records, stolen documents, or straightforward impersonation. Then they attempt to convince a mobile operator or agent that a replacement SIM should be activated for your number.
Signs Worth Taking Seriously, Not Shrugging Off
- Your phone suddenly loses calls, texts, and service while people nearby stay fully connected
- Your operator sends a SIM replacement message you never requested
- You get unexpected password-reset or login notifications
- Your email or banking app reports a new, unfamiliar device
- Friends receive strange requests that appear to come from your number
The Seven Things to Do Immediately
- Use a different phone to contact your mobile operator through an official channel
- Report the unauthorised SIM replacement and request the number be secured
- Contact any bank or payment service connected to that number
- Secure the email account used for account recovery
- Change important passwords from a device you trust
- Review active sessions and sign out any devices you don’t recognise
- Keep every complaint reference and suspicious message you receive
Cut Your Dependence on SMS Where You Can
SMS codes beat having no second factor at all, but they’re only as safe as control of your phone number. Where a service supports a real authenticator app, a passkey, or a hardware security key, use it for anything that actually matters. Keep recovery codes stored offline — never as the only copy sitting inside the same phone that might go dark.
Protect Your NIN Like It’s a Password
Never let anyone register another person’s SIM under your NIN, and don’t hand over identity documents casually. The NCC has specifically warned Nigerians about the risk of linking a NIN to someone else’s SIM. Be suspicious of any caller asking for one-time codes, PINs, or identity details — and if you need to verify, call the operator back using a number you found independently, not one the caller gave you.
Getting Your Number Back Isn’t the Finish Line
Restoring service doesn’t automatically secure every account that depended on it. Review your banking activity, email forwarding rules, linked messaging devices, and account recovery settings. Replace any password you’ve reused elsewhere — the swap may have already exposed more than you realize.
Sudden loss of signal is usually a boring network outage. But treat it as a possible early warning anyway — contact your operator promptly and secure the accounts tied to that number, instead of waiting fifteen minutes to see if the bars come back.
