Can't find anything or the website that addresses sim swap attacks.What does Smarty do to prevent to prevent sim swap attacks? I'm looking to be reassured that Smarty does not make it easy for some imposter to call them and pretend to be a genuine Smarty customer, in an effort to switch sim to a phone the imposter controls.Thanks.

Interesting you should mention banks. One of the first search results when Googling 'what is a sim swap attack' is the NatWest 'SIM swap fraud' page and on that page, under 'Top tips to stay safe', their point No. 2 states:Set up a PIN or password with your phone provider: ask your provider to set up a unique PIN or password on your account, needed to approve any account changes.Which is exactly what I said. Regarding security levels, I would expect Smarty and other phone operators to have this quite basic level of security around swapping SIMs, especially given how central phones are in the security chain.And what I'm suggesting (and Nat West mentions) is really not too difficult - it's just an entry in a database. Then, in the scenario where someone contacts Smarty trying to impersonate a user, the impersonator would need to know this SIM swap password in order to proceed. As it currently stands, it seems the impersonator would just need to gather some biographical information about their target and Smarty would allow the swap.

Until OFCOM mandate such a thing, it’s not going to happen.My recommendation is that OFCOM mandates all UK networks implement an option at account level that locks and prevents a number being ported out when enabled. We have that with .com domains. Why not telephone numbers? Yes, if an account is compromised, the individual can disable the option and port out, but it does prevent anyone hijacking your number through phone support or should they have physical access to your device for any reason.

Well the obvious measure would be a password or PIN. I'm not referring to the password to log in to your Smarty account, obviously. I'm referring to a completely separate password/PIN (a 'SIM swap password') that we could set in our Smarty account that would only be used when trying to swap the phone number to a new SIM.This would help prevent SIM swap attacks because even if the attacker gathered information about the user (name, DOB, address etc) they still wouldn't be able to port the number to a new SIM without knowing this additional piece of information, the SIM swap password.As it currently stands it seems Smarty asks some questions and then goes ahead with the swap. This seems quite insecure. A SIM swap password would help make this process more secure.Thoughts?

smartazoid I think the likelihood of the average user remembering what they've set as their SIM swap PIN/password when it comes to them needing to use it is minimal. If you then enable them to reset/change it through their Smarty account, you may as well just require them to be logged into their Smarty account to request a SIM swap, as at that point the SIM swap PIN/password provides no additional layer of security.

SmartyTrousers smartazoid I'm thinking that many people would simply use the same pin or password as for their accounts o that they would have more chance of remembering it.

What steps does Smarty take to prevent a sim swap attack?

13 Replies

WelshPaul
SMARTY Centurion
16-03-2025
Search the forum using the term 'Sim Swap' and you'll find out!
- smartazoid
  SMARTY Maverick
  16-03-2025
  I did and what I saw wasn't that reassuring
  https://community.smarty.co.uk/t5/chats-hacks/protecting-against-sim-swap-fraud/m-p/44587/highlight/true#M26502
  - SmartyTrousers
    SMARTY Centurion
    16-03-2025
    smartazoid What additional measures would you expect to be in place to prevent a SIM swap attack?
redkate34
SMARTY Pioneer
21-07-2025
Hi.
Has this happened to you?
I've come to Smarty because it happened to me. I was hacked, I think first my email and then my mobile number. The other company allow eSims, so my hacker found it easy to do. There was a tug of war, but they won and my number was ported away. It's ported back to me via the fraud dept, then ported here.
My concern is that my hackers already know my address, dob, postcode, etc. They wouldn't find it hard to get past those questions. I have a new email address, different password and pure fear they'll get me again.
Like you, I want an additional layer of security, and extra password, or 2 step authentication.
I asked on a chat about this and was told i could set a different postcode for example. But I'm not sure if they ask all the questions or a random couple

Forum Discussion

What steps does Smarty take to prevent a sim swap attack?

13 Replies

Recent Discussions

Text message confirming

🚨 Exciting news! You can now get double rewards when you refer a friend to SMARTY!

Phone Network down in Oxfordshire today 24th September 2025

Pausing data overnight ( as a parental control)

html