Threats & attacks
Stop a SIM-Swap Attack Before It Hijacks Your Number
SIM-swap attackers talk your carrier into moving your number onto their SIM, then catch the SMS codes that reset your accounts. Two owner-side moves shut that down: lock the number at your carrier, and stop relying on SMS for two-factor codes.
Start the 4-step lockdownYour carrier's own tools
Every step uses official carrier and platform security settings.
No password ever
We never ask for your password, carrier PIN, or a login code.
Owner-only defense
This protects a number and accounts that belong to you.
If a page or caller ever asks you to read back a code, that is the attack — hang up.
Lock down your number in 4 steps
1
Set a carrier PIN or passcode
Add a port-out or account PIN inside your mobile carrier's official app or account settings.
2
Turn on port-freeze / number lock
Enable your carrier's SIM protection or number lock so the line can't be transferred.
3
Move 2FA off SMS
Switch each account's two-factor from text codes to an authenticator app or a passkey.
4
Re-secure your recovery email
Make sure your email login no longer falls back to an SMS code sent to that number.
Have your carrier account login and one main account open — every setting here is one you already own.
What actually blocks a SIM swap
Carrier account PIN
A port-out PIN forces ID checks before your number can move to another SIM.
Number port-freeze
A carrier lock rejects transfer requests until you unlock the line yourself.
App-based 2FA
Codes stay on your device, so a hijacked SIM intercepts nothing.
Passkeys where offered
Login is bound to your device, leaving no phone number to steal.
Names vary by carrier — look for 'SIM protection', 'port-out PIN', or 'number lock'.
How exposed is your number right now?
SMS is your only 2FA and no carrier PIN is set
high+ Add a port-out PIN and switch key accounts to an authenticator app today. − Every account that texts codes can be reset the moment the number is stolen.
Carrier PIN is set, but email and banking still use SMS codes
medium+ Move your email and financial logins to app codes or passkeys first. − A convincing caller can still socially engineer some carrier reps.
Number is port-frozen and 2FA runs in an authenticator app
low+ Keep backup codes offline and re-check carrier security once a year. − Reused passwords still open a non-SIM path into your accounts.
You've suddenly lost signal and can't call or text
high+ Contact your carrier from another line right away to check for a port-out. − Waiting lets an attacker start resetting accounts while your codes route to them.
These are general risk signals, not a score or a guarantee — carriers and account setups differ.
FAQ
What is a SIM-swap attack in plain terms?
A SIM-swap attack is when someone convinces your mobile carrier to move your phone number onto a SIM card they control, so the calls and SMS codes meant for you are delivered to them instead.
How do I set a carrier PIN or port-out lock?
Open your carrier's official app or account website, find the security option named 'port-out PIN', 'number lock', or 'SIM protection', and set a PIN you don't reuse anywhere else.
Why should I move two-factor authentication off SMS?
Because SMS codes are delivered to whoever holds the number, moving your 2FA to an authenticator app or a passkey keeps the codes on your own device where a hijacked SIM cannot reach them.
My phone suddenly lost all signal — could that be a SIM swap?
A sudden, unexplained loss of calls and texts can mean your number was ported away, so contact your carrier from another phone immediately to confirm it and reverse the transfer if needed.
Can HackSN stop the attack or identify the attacker for me?
No, we can only walk you through securing your own number and accounts with official tools, and we cannot guarantee recovery, identify an attacker, or act on your behalf with your carrier.