Should you be concerned about SIM swapping?

Cybercriminals trick mobile operators into transferring a victim’s number to a new SIM card. This allows them to reset passwords, access accounts/apps and make unauthorized financial transactions. Therefore, the victims may struggle with financial or privacy concerns.

What are TRAI rules for SIM deactivation?

According to TRAI, a sim card will deactivate if it has been inactive since 90 days.

What precautions should users take?

Enabling SIM locks, monitoring accounts closely, using verified apps/websites and staying aware of cybercrimes are some of the few necessary precautions against cyberattacks.

When will the new TRAI regulations be effective?

The latest TRAI rules will be applicable from 1st July 2024 for both prepaid and postpaid users.

Where can users get more information on online scams?

Visit https://www.infosecawareness.in for ongoing awareness campaigns against cyber frauds.

Home

Schemes

Services

Community

About Us

What Is Sim Swapping Scam & How To Protect Yourself From Sim Swapping Fraud?

Pragya Pathak

Author

Updated: 15-04-2025 at 3:30 PM

The Telecom Regulatory Authority of India (TRAI) has announced changes to mobile number portability rules to prevent SIM swap fraud. Under this new rule, SIM owners who’ve gotten a new SIM due to theft or damage cannot port the new SIM card for the next 7 days.

Read the article to learn more about instances of SIM fraud and how one can safeguard oneself against it.

What Is SIM Fraud?

SIM swapping is a form of cybercrime. Scammers can gain control of a user's mobile number by tricking the mobile service provider into assigning the SIM card to their control.

Once attained, the scammer can access valuable and encrypted information. Targeting OTPs for transactions, social media accounts, and other important digital assets.

India has over 1.17 billion mobile subscribers, with 100 million users added yearly. Yet, the ease of obtaining new SIM connections has also increased SIM swap fraud risks.

How does this work? Cybercriminals trick mobile company personnel into transferring a victim’s existing number to a new SIM card. Through this, they can reset passwords, access emails/apps, and authenticate illegal fund transfers.

TRAI research shows over 60% of Indian adults fell victim to SIM swap fraud in the past 3 years. 2021 alone marked a collective loss of ₹500 crores. With increased dependence on mobile apps for payments and banking, experts have flagged this as a severe threat.

The absence of mandated identity verification protocols, lack of user awareness, and delays in anomaly reporting have only added to the risks.

What Precautions Should Be Taken to Prevent Such Scams?

Individuals should take some precautionary measures for their own safety against scams of any kind. Some of the measures that one can take are as follows:

Enable password or pin protection to add an extra layer of security.
Monitoring of accounts for any unusual activity or discrepancies. It can help the user report to the apt authorities in case of any suspected fraud activities.
Only use government-authorised and credible apps and websites. Do not fall prey to phishing (when attackers send scam emails or text messages that contain links to malicious websites). As you might end up losing your important information and assets.
Stay educated and informed on cybercrimes and digital security initiatives. This will prevent you from falling for such scams.

Case Studies

26-year-old Ritika Sharma, a Delhi resident, lost ₹2.6 lakhs. She fell prey after receiving a fake call pretending to be her bank’s customer service department. The fraudster had gained access to her number through a SIM swap attack. The amount represented her family's entire savings.

In another incident, Mumbai-based senior citizen Vasant Kolte received an SMS containing a phishing site link. Upon clicking the link, the malware installed on his phone allowed an illegal transfer of ₹ 90,000 from his account.

Such incidents have become rampant over the past two years. Adding vulnerabilities in verification processes poses severe threats to customer assets. It is raising a serious trust issue with digital payment adoption.

What Is TRAI’s Six-Step Authentication Process?

The TRAI has mandated a six-step authentication procedure for processing SIM replacement. These steps for SIM upgrade requests curb fraud risks.

Step 1: Photo Capture. Telecom company agents must capture a clear image of the SIM card holder.

Step 2: Match the User Photo with Aadhar. The person’s face should match the Aadhar photo.

Step 3: Biometric Scan. Fingerprint and iris scans are mandatory for authentication.

Step 4: Aadhar-Based OTP. The registered mobile number of the user will receive a system-generated OTP.

Step 5: Matching Documents. Old SIM details should exactly match user-submitted KYC documents.

Step 6: Tele-verification. The user must answer a personalised question set during initial SIM activation.

By mandating these steps, the guidelines reduce the chances of override. The protocols must be applicable to both prepaid and postpaid users.

Conclusion

While regulations tighten SIM swap attack vulnerabilities on the process front, users must also remain vigilant against phishing attempts. Things like sharing OTPs or clicking on unverified links are a no. Law enforcement agencies have upgraded digital fraud investigation units. They also launched citizen awareness drives urging prompt anomaly reporting.

The new rules conjured up by the TRAI will be effective from the 1st of July 2024. By taking crucial measures and staying educated on cybercrimes and digital scams, users can use the services provided. Government-regulated bodies help make such services and experiences safer. By pushing forward with these rules, a better, safer, and more reliable digital India is the future.

Stay updated with Jaagruk Bharat to get the latest information on government schemes and more, and reach out to us via our community page if you have any questions or want to share your thoughts.