Staying safe
SIM-swap fraud
How criminals hijack a phone number to intercept codes and drain accounts, the warning sign to act on, and how to harden your SIM.
Most fraud steals what you have. SIM-swap fraud steals what you are — your phone number, the identity that half your financial life answers to. Once a criminal controls the number, every SMS code, every "we'll call to verify", every reset-by-phone flow arrives at their desk instead of yours.
How the hijack works
The attacker does not touch your phone. Armed with your personal details — name, number, ID information gathered from phishing, leaked documents, social media, or a talkative call — they approach your operator as you, claiming a lost or damaged SIM, and request a replacement. If the impersonation succeeds, your SIM goes dark and theirs lights up with your number. Registered SIMs and operator verification procedures exist to make this hard, which is why the preparation phase is always about harvesting enough of your details to pass as you.
The warning sign — and the golden hours
The signature is sudden, unexplained loss of service: your phone shows no network in places it always works, calls stop arriving, and restarting changes nothing. That silence is not a technical glitch to shrug at — it may be your number answering to someone else. The first hours matter most, because the attacker is racing through your accounts while you are still blaming the network.
- Contact your operator immediately from any other phone — report suspected SIM fraud and get the number blocked or restored.
- From a device you control, secure the accounts that lean on that number: change passwords, and review your payment apps.
- Check your wallet's active sessions and sign out anything you do not recognise — Kit Pay users can follow lost or stolen phone, which covers the same containment moves.
- Report to the police if money moved, and keep the case reference.
Hardening before it happens
- Set a PIN on the SIM itself, so a physically stolen SIM cannot simply wake up in another phone.
- Starve the impersonation: the attack runs on your personal details, so treat your ID numbers, registration details, and answers to "verification" calls as the weapons they become.
- Prefer app-based security over SMS wherever a service offers it. Codes that live in an app on a device you hold do not travel to whoever holds your number — one-time codes explained covers why this matters.
- Know your operator's SIM-replacement safeguards and use any extra locks they offer for high-risk actions.
Frequently asked questions
My phone lost network for an afternoon. Should I panic?
Coverage gaps and outages happen — but this one warning deserves the cheap check: try a restart, ask whether others on your network nearby have service, and if you alone are dark for no reason, call your operator from another phone and ask directly whether your SIM was replaced. Minutes spent on a false alarm cost nothing.
Can a SIM swap happen without any mistake on my part?
Yes — the deception targets the operator's process, not just you, which is why safeguards on replacements exist and keep tightening. Your part is lowering the odds (guard your details) and shrinking the damage (SIM PIN, app-based security, fast reporting). Perfection is not required; speed is.
Sources
- Uganda Communications Commission — last reviewed