Resource note

Resources / Mobile & Telecom

Carrier Security Baseline for SIM-Swap Resistance

A carrier account can control phone-number transfers and messages used for account recovery. Review the protections your provider offers.

Mobile & Telecom Published by Velocity Ops Updated

Resource note

Resources / Mobile & Telecom

A phone-number transfer or SIM change can redirect calls and text codes to a device controlled by someone else. If you rely on a phone number for account recovery, review the carrier account as part of your recovery plan.

Check these settings with your carrier:

  • Set a unique account PIN or passcode and ask how it is used to approve account changes.
  • Turn on a number-transfer or port-out lock if the carrier offers one.
  • Ask whether the account can notify you about a SIM change or transfer request.
  • Change default voicemail credentials if the service uses a PIN.
  • Review which important accounts rely on SMS recovery and add another recovery method where available.

Features and names differ by carrier and plan. A PIN or transfer lock does not stop every form of impersonation or prevent compromise of the carrier's own processes. Contact the carrier using a number or support channel from its official website if you see an unexpected service change.

Sources and further reading