The first sign of a SIM swap is not a message. It is silence. Your phone shows no signal, and because that happens for boring reasons all the time, most victims spend two hours assuming it is a network problem while someone else receives their OTPs.
SIM swap fraud is one of the few attacks where your own security habits barely matter. The weak point is your telecom operator’s counter, not your password.
How the Attack Actually Runs
It has four stages and no technical sophistication.
Collecting your details. Name, date of birth, address, Aadhaar or ID fragments — from data breaches, leaked databases, or documents you handed over at a hotel or an office reception. Sometimes from you directly, through a call claiming your SIM will be deactivated unless you confirm your details.
Obtaining a replacement SIM. The attacker approaches the operator, in person or through a complicit retailer, and requests a duplicate SIM on your number using those details. This is the actual failure point, and it is not one you can control.
Your SIM dies. The moment the new SIM activates, yours stops working. This is the window in which you can still limit the damage.
OTP harvesting. Every SMS OTP now goes to them. Banking, UPI, email password resets, wallet withdrawals, and anything else that treats your number as proof of identity.
The Warning Signs
- Sudden, complete loss of signal that persists while other phones on the same network work normally. This is the big one.
- A call beforehand claiming to be from your operator about KYC, an upgrade, or an impending deactivation.
- An unexpected SMS about a SIM replacement or a porting request.
- Being unable to make calls while Wi-Fi data still works.
If your phone loses signal for more than about thirty minutes with no obvious cause, do not wait it out. Call your operator from another phone and ask directly whether a SIM replacement was issued on your number.
What the Rules Actually Do
Two protections exist, and both are narrower than people assume.
SMS is disabled for 24 hours after a SIM is re-issued. A new SIM cannot send or receive text messages for a full day after activation. This is a real and useful brake — it costs the attacker a day, and it gives you a day.
Porting is blocked for seven days after a SIM swap. Under TRAI’s Mobile Number Portability (Ninth Amendment) Regulations, 2024, effective 1 July 2024, a unique porting code will not be issued within seven days of a SIM swap or replacement. This stops the follow-up move of porting your number to a different operator to escape recovery.
The misconception to correct: the seven-day rule does not prevent SIM swap. It prevents porting after one. The swap itself, and OTP theft on the same operator, are untouched by it. Any article telling you the 2024 rule solved this problem has misread it.
What to Do in the First Hour
- Confirm it. Call your operator from another phone. Ask whether a duplicate SIM was issued and demand it be blocked immediately.
- Freeze the money. Call your bank and have net banking, UPI and cards suspended. Do not wait for a confirmed loss.
- Change passwords from a different device, starting with your email, because email controls recovery for everything else.
- Report it. If money has moved, call 1930 and file on cybercrime.gov.in. Speed decides whether funds can be frozen in the receiving account.
- Get your number back with a genuine SIM replacement, carrying your ID.
- Check TAFCOP afterwards to see every connection registered against your identity, as set out in our guide to checking how many SIM cards are registered on your name.
Reducing Your Exposure Beforehand
Stop relying on SMS OTP where you have a choice. This is the single most effective change. Use an authenticator app for anything that offers it — Google, Microsoft, Instagram, most exchanges. Codes generated on your device cannot be intercepted by someone holding your number.
Separate your numbers. Keep one number for banking and government services and never publish it. Use a second for shopping, deliveries, OTPs on trivial sites, and anything you type into a web form. Most SIM swap targets are chosen from numbers that were easy to find.
Set a SIM PIN on the physical card, so a stolen handset does not hand over your number directly.
Ask your operator about a port-out lock or SIM change alert if they offer one on your plan.
Never confirm personal details on an inbound call, whoever it claims to be from. Hang up and call the official number yourself. The same discipline defeats several other frauds, including the one described in our guide to the digital arrest scam.
eSIM Is Not Immunity
A common assumption worth correcting: moving to eSIM does not close this hole. An eSIM profile can be re-issued through the same customer-service process, using the same social engineering. The physical card disappears; the human at the counter does not.
What eSIM does help with is theft, since there is no card to remove from a stolen handset — which pairs well with knowing how to block a stolen phone across every Indian network.
The Uncomfortable Summary
You cannot prevent a SIM swap through your own diligence, because the decision is made at a counter you are not standing at. What you can control is how much a stolen number is worth. Move your critical logins off SMS, keep your banking number private, and know the signal-loss symptom well enough to act on it in thirty minutes rather than three hours.
We keep this kind of practical Indian security guidance current at Techleez.
Frequently Asked Questions
What is the first sign of a SIM swap?
A sudden and complete loss of mobile signal that persists while other phones on the same network work normally.
Can I stop a SIM swap from happening?
Not entirely, because the replacement is issued by your operator. You can reduce the damage by moving critical accounts off SMS OTP and keeping your banking number private.
Does the TRAI seven-day rule prevent SIM swap fraud?
No. It blocks porting for seven days after a SIM replacement. It does not prevent the swap itself or stop OTP theft on the same operator.
Is eSIM safer against SIM swap?
No. An eSIM profile can be re-issued through the same process. It does help against physical theft of the card.
Why can a new SIM not receive SMS immediately?
SMS is deliberately disabled for 24 hours after a SIM is re-issued, as an anti-fraud measure. It applies to genuine replacements too.
Who do I call if money is taken after a SIM swap?
Call 1930 immediately and file a complaint at cybercrime.gov.in, alongside informing your bank.
Fold Smith
Fold Smith is a technology journalist and the lead editor of The Techleez, an India-first publication that decodes technology, digital payments, streaming and online culture for everyday readers. From UPI and fintech explainers to OTT streaming guides, Android tips and online-safety checklists, he personally tests the apps, tools and services featured on the site before recommending them. His focus is practical, research-backed guidance that helps Indian readers make smarter digital decisions — spend less, stream better and stay safe online. When he is not writing, he is usually tracking NPCI circulars, first-day-first-show box office numbers, or the next big OTT premiere.
More from this author →
