SIM Swap Fraud in India:
How It Works and How to Stop It
Fraudsters can take over your phone number without touching your phone. Once they have it, they get every OTP — your bank, GPay, WhatsApp, and email all fall in minutes. Here is how it works and how to prevent it.
Last updated: June 2026 · 7 min read
If your phone suddenly shows "No SIM" or "Emergency Calls Only"
This is the first sign of an active SIM swap. Call your telecom operator immediately from another phone and ask them to block the SIM porting. Do not wait to confirm — every minute counts.
How SIM Swap Fraud Works in India
The attacker does not need your phone. They need only your phone number and some personal information about you. Here is the typical sequence:
They collect your details
Using phishing calls, fake KYC messages, or data purchased from data brokers, they gather your name, Aadhaar number, and the last 4 digits of your existing SIM — enough to impersonate you at a retailer.
They visit a telecom retailer
Armed with your details (and sometimes a fake ID), they request a duplicate SIM or number port on your behalf. Retailer verification is often weak at small shops.
Your SIM stops working
Once the swap completes, your SIM deactivates. Calls and SMS — including OTPs — now go to their SIM.
They access your accounts
With OTP access, they reset your net banking, UPI, and email passwords. Transactions are initiated within minutes, before you realise what happened.
How to Protect Yourself Before It Happens
Enable SIM lock / port block with your operator
Call your operator and ask them to place a restriction on outgoing number ports. On Jio, this can be done via the MyJio app. On Airtel, call 121. This requires your physical presence or a video call to undo.
Never share your Aadhaar or SIM details over a call
Telecom companies never call to "verify your KYC" or "update your SIM." If you receive such a call, hang up immediately.
Use app-based 2FA instead of SMS OTP where possible
Google Authenticator and Microsoft Authenticator generate codes on your device — not via SMS. Enable these for email and banking apps wherever offered.
Set a SIM PIN on your physical SIM
Go to Settings → Security → SIM card lock. This prevents your SIM from being used in another phone even if it is stolen — but does not prevent a swap at a retailer.
Register your mobile number on TRAI DND
While it does not block fraud calls, it reduces the volume of spam through which attackers gather information.
If It Happens to You: Act in This Order
Call your operator from another phone
Jio: 1800-889-9999 | Airtel: 121 | Vi: 199 | BSNL: 1800-180-1503. Tell them your SIM has been swapped and ask them to block it immediately.
Call your bank before the OTPs are used
Block your debit card and freeze net banking. Most banks have a 24-hour helpline. Tell them you believe your OTPs are compromised.
Change passwords from a safe device
Use a trusted laptop or another phone. Change your email, UPI, and banking passwords before the attacker locks you out.
File a cybercrime complaint
Report at cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). For bank fraud, also file a complaint at your bank branch.
File an FIR at your local police station
For insurance claims and bank fraud reversal, you will need an FIR. Mention IPC 419 (impersonation) and IT Act 66C (identity theft).