SIM swap Scam Targeting Globe, Smart & DITO Customers na Filipínách

Your mobile number is the key to almost everything in your digital life — your GCash, Maya, online banking, social media, and email. A SIM swap attack puts all of that at risk by transferring your phone number to a SIM card controlled by a criminal. In the Philippines, where SMS-based OTPs are the primary authentication method for most financial services, SIM swap fraud is a growing and serious threat.

Here is how it works and how to protect yourself.

How SIM swap Works

A SIM swap (also called SIM hijacking) happens when a criminal convinces your mobile carrier — Globe, Smart, or DITO — to transfer your phone number to a new SIM card. Once the swap is complete:

1. Your phone loses signal. Your original SIM becomes deactivated.
2. The criminal receives all your calls and texts — including OTPs from banks, GCash, Maya, and other services.
3. The criminal resets passwords and gains access to your accounts.
4. Money is transferred out of your bank accounts and e-wallets before you realize what happened.

The entire process can take less than 30 minutes from the time your signal drops to the time your accounts are emptied.

How Criminals Execute SIM Swaps na Filipínách

Method 1: Social Engineering the Carrier

The scammer calls Globe, Smart, or DITO customer support pretending to be you. Using personal information gathered from data breaches, social media, or phishing, they answer security questions and request a SIM replacement citing a "lost" or "damaged" SIM.

Method 2: Insider at a Carrier Store

In some cases, the criminal has an accomplice working at a telco store or authorized dealer. The insider processes the SIM swap without proper verification.

Method 3: Fake ID and Walk-In

With the SIM Registration Act requiring ID verification, criminals may use fake IDs or compromised PhilSys data to walk into a carrier store and request a replacement SIM in your name.

Method 4: Porting Request

The scammer initiates a number porting request from one carrier to another, transferring your Globe number to Smart (or vice versa) using fraudulent identification.

Varovné signály of a SIM swap Attack

Warning Sign	What It Means
Sudden loss of mobile signal	Your SIM may have been deactivated
Inability to make calls or send texts	New SIM is active on another device
Unexpected password reset emails	Criminal is accessing your accounts
Unknown login notifications	Your accounts are being compromised
Bank or GCash notifications for transactions you did not make	Money is being stolen
Friends receiving messages you did not send	Criminal has access to your messaging apps

Co dělat Immediately If You Suspect a SIM swap

The first few minutes are critical. Act fast:

1. Try calling your own number from another phone. If someone else answers or the call connects, your SIM has been swapped.
2. Contact your carrier immediately — Globe: 211, Smart: *888, DITO: 185 — and request an account lock.
3. Contact your bank and request a freeze on all transactions.
4. Lock your GCash and Maya accounts through their emergency channels.
5. Change passwords on all critical accounts (email, banking, social media) from a secure device connected to WiFi, not mobile data.
6. Enable app-based two-factor authentication (Google Authenticator, not SMS) on all accounts that support it.
7. File a report with the NBI Cybercrime Division and PNP Anti-Cybercrime Group.
8. Visit your carrier store in person with valid ID to reclaim your number.

Jak předejít SIM swap Attacks

Secure Your Carrier Account

• Set a PIN or security password on your carrier account (Globe, Smart, and DITO all offer this)
• Register biometric verification if your carrier supports it
• Never share your account details — subscriber number, account password, or security questions

Reduce Your Attack Surface

• Minimize the personal information you share on social media (birthday, mother's maiden name, address)
• Use app-based 2FA (Google Authenticator, Authy) instead of SMS-based OTPs whenever possible
• Use unique email addresses for financial accounts — not the same email you use for social media

Monitor Your Accounts

• Enable transaction notifications on all bank accounts and e-wallets
• Check your phone signal regularly — unexplained signal loss is the first sign
• Set up email alerts for login attempts on important accounts

Chraňte své Personal Data

• Be cautious with PhilSys ID sharing — your personal details can be used to impersonate you
• Shred or securely dispose of documents containing your phone number and personal information
• Do not respond to phishing messages that ask for personal verification details

SIM Registration Act Considerations

The SIM Registration Act (RA 11934) requires all SIM cards to be registered with valid government IDs. While this adds a layer of verification, it also means that criminals with access to your ID information have a pathway to execute SIM swaps. Protect your registered information as carefully as you protect the SIM itself.

Sdílení Sensitive Account Information bezpečně

When you need to share phone numbers, carrier account details, PINs, or other sensitive information with a trusted family member, avoid sending them through text or Messenger where they could be intercepted or leaked.

Use LOCK.PUB to create a password-protected, self-expiring link. Share the link through one channel and the password through another — for example, the link via Viber and the password via a face-to-face conversation. Once the link expires, the information is gone.

Závěr

SIM swap fraud is one of the most dangerous attacks facing Filipino mobile users because your phone number is the gateway to your entire digital life. The combination of SMS-based OTPs, widespread mobile banking, and the availability of personal data through breaches makes the Philippines particularly vulnerable.

Switch to app-based authentication wherever possible, secure your carrier account with a PIN, and monitor your signal status. If your phone suddenly loses signal for no reason, treat it as an emergency.

For safely sharing sensitive account details, visit LOCK.PUB to create free encrypted links that protect your information and disappear after use.