SIM Swap Fraud and Duplicate SIM Takeover through an app

How it looks through an app, the red flags and what to do.

A fake app can be installed from a link, from a file sent on chat or even from a lookalike listing. Once on your phone it can ask for powerful permissions. SIM Swap Fraud and Duplicate SIM Takeover is one of the ways this shows up: Your phone loses network for no reason and OTPs go to a criminal's SIM. Learn the signs of SIM swap fraud and what to do at once.

What sim swap fraud and duplicate sim takeover looks like through an app

• A screen-sharing or remote-control app that a caller asks you to install.
• A loan app that asks for contacts and photos.
• A "KYC", "challan" or "bank rewards" app from a link.

The set-up begins with your personal details: name, number, address and a few ID details gathered from leaks, phishing or a fake KYC call. Using these, the scammer approaches a shop or a call centre to ask for a new SIM, claiming that his phone was lost. In another version a caller poses as an operator and asks you to press a key or send an SMS to 'upgrade to 5G' or 'update KYC', which approves the SIM change.

Red flags to check on the app

• A caller asks you to press a key or send an SMS to upgrade or update your SIM.
• Your phone suddenly shows no service while others nearby have network.
• You get messages that a SIM change was requested that you did not ask for.
• Bank or UPI alerts about transactions you did not do.
• You were told to install it by a stranger or a caller.
• It has few or odd reviews, or a name with spelling changes.

What to do

1. If you lose network unexpectedly, contact your operator through another phone, using the number printed on your SIM pack or in its official app.
2. Call your bank on the number on your card and ask to block cards, UPI and net banking temporarily.
3. Change email and social passwords using another device and number.
4. Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.
5. Change the passwords of your bank and email from a clean device if the app had access.
6. Run a phone scan (Safeavio Sentinel lists risky apps and settings).

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call 1930 immediately and report at cybercrime.gov.in with the SIM and bank details.
2. Tell your bank at once so it can try to hold or recall the transfers.
3. Ask the operator in writing about the SIM change request and keep the reply.
4. Re-secure WhatsApp, email and other accounts that use your number.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Anti-theft in Safeavio Sentinel includes a SIM-change alert, which can warn you when the SIM in your phone changes, and recovery information. Scam check can read a message or script you paste, such as a '5G upgrade' call, and show the reasons it looks risky. Safeavio cannot stop an operator from issuing a duplicate SIM elsewhere, so contact your operator and bank at once.

Full guide: SIM Swap Fraud and Duplicate SIM Takeover: how it works, signs and what to do. Other channels: phone call, SMS, WhatsApp.

Questions