Forum Discussion
What steps does Smarty take to prevent a sim swap attack?
Search the forum using the term 'Sim Swap' and you'll find out!
I did and what I saw wasn't that reassuring
smartazoid What additional measures would you expect to be in place to prevent a SIM swap attack?
Well the obvious measure would be a password or PIN. I'm not referring to the password to log in to your Smarty account, obviously. I'm referring to a completely separate password/PIN (a 'SIM swap password') that we could set in our Smarty account that would only be used when trying to swap the phone number to a new SIM.
This would help prevent SIM swap attacks because even if the attacker gathered information about the user (name, DOB, address etc) they still wouldn't be able to port the number to a new SIM without knowing this additional piece of information, the SIM swap password.
As it currently stands it seems Smarty asks some questions and then goes ahead with the swap. This seems quite insecure. A SIM swap password would help make this process more secure.
Thoughts?
