Understanding SIM Swap Fraud: How to Protect Your Australian Mobile Number and Business Accounts

Summary

This guide helps you troubleshoot and resolve: Understanding SIM Swap Fraud: How to Protect Your Australian Mobile Number and Business Accounts. Follow the steps below to fix the issue.

Common Causes

SIM swap fraud occurs when a criminal convinces a mobile carrier to transfer your phone number to a SIM card they control. Once they have your number, they can intercept SMS-based two-factor authentication (2FA) codes and gain access to your business email, banking portals, and other critical accounts. For Australian small business owners, this type of identity theft can lead to significant financial loss and operational downtime.

Recognising the Signs of SIM Swap Fraud

Early detection is vital to limiting the damage caused by a SIM swap. Be alert for the following warning signs:

• Your mobile phone suddenly displays "No Service" or "SOS only" in an area where you normally have strong coverage.
• You are unable to make calls or send text messages.
• You receive notifications from your mobile provider confirming a SIM card change that you did not request.
• You are locked out of email, banking, or business accounts despite using the correct password.
• You receive alerts about password resets or login attempts from unfamiliar devices.

Immediate Actions to Take

If you suspect your number has been swapped, act quickly to secure your accounts and regain control of your mobile service.

1. Contact your mobile provider immediately to report the unauthorised SIM swap and request that your number be restored to your original SIM.
2. Use a different device to log into your primary email and business accounts.
3. Change the passwords for your email, banking, and cloud storage accounts immediately.
4. Review your account security settings to remove any unfamiliar recovery email addresses or phone numbers.
5. Check your bank statements and business accounting software for any unauthorised transactions.
6. Open a Ticket with 220 Internet Services if you need assistance securing your business network or resetting corporate credentials.

Preventing Future SIM Swap Attacks

Secure Your Mobile Account

Most Australian mobile providers offer additional security features to prevent unauthorised porting or SIM changes.

1. Log into your mobile provider's online account portal.
2. Navigate to the Security or Profile settings.
3. Enable a porting lock or SIM swap protection if available.
4. Set up a unique PIN or password that must be provided before any changes can be made to your account.
5. Ensure your contact details with the provider are up to date so you receive alerts about account changes.

Move Away from SMS-Based 2FA

SMS codes are vulnerable because they are tied to your phone number. Switching to an authenticator app provides a much higher level of security for your business accounts.

1. Log into the security settings of your critical accounts (e.g., Microsoft 365, Google Workspace, Xero, or your banking portal).
2. Locate the Two-Factor Authentication or Multi-Factor Authentication section.
3. Choose the option to use an authenticator app, such as Microsoft Authenticator or Google Authenticator.
4. Install the app on your mobile device and scan the QR code provided by the service.
5. Save the backup recovery codes provided by the service in a secure location, such as a password manager.
6. Remove the SMS verification method from your account settings once the authenticator app is configured.

Protect Your Personal Information

Criminals often gather personal details through phishing emails or social media to answer security questions during a SIM swap attempt.

• Avoid sharing your full date of birth, home address, or mobile number publicly on social media.
• Be cautious of emails or text messages asking you to verify your account details; legitimate providers will not ask for your password via SMS.
• Use strong, unique passwords for your email and mobile provider accounts.
• Enable 2FA on your email account, as it is often the gateway to resetting passwords for all other services.

Still Having Issues?