Threat Intelligence Directory
Fraud

SIM Swap Attack — Phone Number Hijacking

Attack Trigger

Attacker socially engineers your mobile carrier to transfer your phone number to their SIM card

What Attackers Want

$10,000–$1,000,000+ in bank and crypto account losses

How This Attack Works

A fraudster calls your mobile carrier impersonating you, using personal details gathered from data breaches or social media. They request an emergency SIM transfer to a new device they control. Once your number is ported, they intercept all SMS-based two-factor authentication codes and immediately take over bank, email, and cryptocurrency accounts.

Red Flags to Watch For

  • Your phone loses all carrier signal unexpectedly — no calls, texts, or data
  • You receive a carrier text confirming an account change you did not request
  • Password reset emails or banking alerts arrive for actions you did not initiate
  • Your mobile carrier account shows a recent SIM change in the activity log
  • Multiple account lockout notifications arrive simultaneously across services
  • Someone already knew your carrier account PIN — obtained from a prior data breach

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • carrier-sim-verify.comMALICIOUS
  • mobile-number-transfer.netMALICIOUS
  • phone-account-update.comMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free