SIM Swap Scam Targeting Globe, Smart & DITO Customers in the Philippines

Your mobile number is the key to almost everything in your digital life — your GCash, Maya, online banking, social media, and email. A SIM swap attack puts all of that at risk by transferring telefonul tau number to a SIM card controlled by a criminal. In the Philippines, where SMS-based OTPs are the primary authentication method for most financial services, SIM swap fraud is a growing and serious threat.

Here is how it works and how to protejeaza-te.

How SIM Swap Works

A SIM swap (also called SIM hijacking) happens when a criminal convinces your mobile carrier — Globe, Smart, or DITO — to transfer telefonul tau number to a new SIM card. Once the swap is complete:

1. Your phone loses signal. Your original SIM becomes deactivated.
2. The criminal receives all your calls and texts — including OTPs from banks, GCash, Maya, and other services.
3. The criminal resets passwords and gains access to contul taus.
4. Money is transferred out of your cont bancars and e-wallets before you realize what happened.

The entire process can take less than 30 minutes from the time your signal drops to the time contul taus are emptied.

How Criminals Execute SIM Swaps in the Philippines

Method 1: Social Engineering the Carrier

The scammer calls Globe, Smart, or DITO customer support pretending to be you. Using informatii personale gathered from scurgere de datees, social media, or phishing, they answer security questions and request a SIM replacement citing a "lost" or "damaged" SIM.

Method 2: Insider at a Carrier Store

In some cases, the criminal has an accomplice working at a telco store or authorized dealer. The insider processes the SIM swap without proper verification.

Method 3: Fake ID and Walk-In

With the SIM Registration Act requiring ID verification, criminals may use fake IDs or compromised PhilSys data to walk into a carrier store and request a replacement SIM in your name.

Method 4: Porting Request

The scammer initiates a number porting request from one carrier to another, transferring your Globe number to Smart (or vice versa) using fraudulent identification.

Semne de avertizare ale unui atac SIM swap

Warning Sign	What It Means
Sudden loss of mobile signal	Your SIM may have been deactivated
Inability to make calls or send texts	New SIM is active on another device
Unexpected password reset emails	Criminal is accessing contul taus
Unknown login notifications	Your accounts are being compromised
Bank or GCash notifications for transactions you did not make	Money is being stolen
Friends receiving messages you did not send	Criminal has access to your messaging apps

What to Do Immediately If You Suspect a SIM Swap

The first few minutes are critical. Act fast:

1. Try calling your own number from another phone. If someone else answers or the call connects, your SIM has been swapped.
2. Contact your carrier immediately — Globe: 211, Smart: *888, DITO: 185 — and request an account lock.
3. Contact your bank and request a freeze on all transactions.
4. Lock your GCash and Maya accounts through their emergency channels.
5. Change passwords on all critical accounts (email, banking, social media) from a secure device connected to WiFi, not mobile data.
6. Enable app-based autentificarea in doi pasi (Google Authenticator, not SMS) on all accounts that support it.
7. File a report with the NBI Cybercrime Division and PNP Anti-Cybercrime Group.
8. Visit your carrier store in person with valid ID to reclaim your number.

Cum sa previi SIM Swap Attacks

Secure Your Carrier Account

• Set a PIN or security password on your carrier account (Globe, Smart, and DITO all offer this)
• Register biometric verification if your carrier supports it
• Nu partaja niciodata account details — subscriber number, account password, or security questions

Reduce Your Attack Surface

• Minimize the informatii personale you share on social media (birthday, mother's maiden name, address)
• Use app-based 2FA (Google Authenticator, Authy) instead of SMS-based OTPs whenever possible
• Use unique email addresses for financial accounts — not the same email you use for social media

Monitor Contul Taus

• Enable transaction notifications on all cont bancars and e-wallets
• Check telefonul tau signal regularly — unexplained signal loss is the first sign
• Set up email alerts for login attempts on important accounts

Protejeaza-ti datele personale

• Be cautious with PhilSys ID sharing — your personal details can be used to impersonate you
• Shred or securely dispose of documents containing telefonul tau number and informatii personale
• Do not respond to phishing messages that ask for personal verification details

SIM Registration Act Considerations

The SIM Registration Act (RA 11934) requires all SIM cards to be registered with valid government IDs. While this adds a layer of verification, it also means that criminals with access to your ID information have a pathway to execute SIM swaps. Protect your registered information as carefully as you protect the SIM itself.

Sharing Sensitive Account Information Safely

When you need to share phone numbers, carrier account details, PINs, or other informatii sensibile with a trusted family member, avoid sending them through text or Messenger where they could be intercepted or leaked.

Use LOCK.PUB to create a protejat cu parola, self-expiring link. Share the link through one channel and the password through another — for example, the link via Viber and the password via a face-to-face conversation. Once the link expires, the information is gone.

Concluzie

SIM swap fraud is one of the most dangerous attacks facing Filipino mobile users because telefonul tau number is the gateway to your entire digital life. The combination of SMS-based OTPs, widespread mobile banking, and the availability of personal data through breaches makes the Philippines particularly vulnerable.

Switch to app-based authentication wherever possible, secure your carrier account with a PIN, and monitor your signal status. If telefonul tau suddenly loses signal for no reason, treat it as an emergency.

For safely sharing sensitive account details, visit LOCK.PUB to create free encrypted links that protect your information and disappear after use.