Pattern Decoder

SIM Swap / 2FA Interception

Someone stealing your phone number to get in

Station 20 of 25 on the Online and technology line. Code O 20

Safety first

Danger signals include money moving, access to your private messages, or messages that show someone knows your movements. A former partner who once held your carrier details is a special concern.

A SIM problem in that setting may be one piece of wider monitoring. Use a device that person has never touched to contact your carrier and bank.

Reach a stalking or domestic abuse advocate before changing anything they might notice.

What is SIM Swap / 2FA Interception?

Someone gets control of your phone number or the codes sent to it. They then use those codes to get into your accounts while you are locked out.

It can sound like

  • Your phone suddenly shows ‘No service’ or ‘SOS only’ in a place where you normally have full bars.
  • Texts with verification codes you did not ask for, arriving in a bunch.
  • An email from your carrier saying your SIM or number was changed, which you did not do.
Check it step by step in the guideTick what fits, compare look-alikes and save it, all on your own device.

Signs it might be this

  • Service drops without explanation and the carrier later confirms a SIM or number change you did not request.
  • Several unrelated accounts show resets or sign-ins from new devices within the same day.
  • The recovery phone number or email on an account has been changed without you.
  • Texts or calls meant for you stop arriving at your phone.
  • The timing matches a falling-out with someone who had access to your carrier account or devices. That shows only access, and not who acted.

Signs it is probably something else

  • The carrier confirms an outage or maintenance in your area, and service returns on its own.
  • Your carrier’s account history shows only changes you or the account owner made.
  • Only one platform is affected, and everything else works.
  • Codes arrive when you are actually trying to sign in.
  • The lockout comes from too many password attempts and clears after a wait or a verification.
  • The carrier shows an outage, a billing hold or a change you made.
  • Only one service is affected and the others work normally.
  • Service returns within hours and your accounts show nothing unfamiliar.

Questions to ask yourself

  • Has my carrier confirmed an account change that someone other than me requested?
  • Did my signal vanish around the same time that accounts began to lock?
  • Are the changes to recovery emails and numbers ones I made?
  • Who else has ever had access to my carrier account, number or devices?
  • Is it one account or many, and did it begin all at once?
  • Do bank alerts or messages from friends show activity I did not do?

What it is

A SIM swap is when a phone number is moved onto a SIM card that is not the owner’s. Calls and texts then go to someone else.

2FA interception is the wider outcome. The one-time codes that prove who you are reach another person, by a swap or by other routes.

Carrier outages and glitches happen, so one odd code means little. The telltale sequence is a lost signal, then lockouts, then account changes that someone else made.

Why it matters

The phone number that secures everything else becomes the way in. The lockout usually arrives before there is any way to understand what has happened.

Email, banking and messaging can all be reached from a single number, so a loss can spread quickly.

How it shows up

  • A phone number moved to a SIM or device the owner does not hold, which takes over their calls and texts.
  • Text-message codes that arrive with someone else, so they can pass the checks for logins and password resets.
  • Often arranged through a carrier’s account processes and not by breaking into your device.
  • It is used for theft, impersonation, reading private messages, or cutting a person off from their own accounts. Sometimes the person doing it is someone the account owner knows.
  • There are two overlapping behaviors. Swapping is one method, and interception of codes is the broader result. Interception can also happen without a swap.

What you can do

Read the safety note at the top first. If speaking up could make things worse, skip the wording below and talk to someone you trust or a local support service.

Words you could use

“I did not request a change to my SIM or my number. Please note that on the account, require extra verification for any future change, and send me a written record of what changed and when.”

Ask about it gently

First, check from a different, trusted device or a friend’s phone. Look at your carrier account’s recent changes and at the sign-in history on your email. Write down what you find, with times.

Set a clear limit

Do not read out codes or PINs to anyone who calls or texts, even if they seem to be your carrier or bank. Hang up and contact them through the number on your card or their official app.

Step back

Once you are back in control, move key accounts such as email and banking off text-message codes, where the service allows. Use an authenticator app or a physical security key instead.

Get support

Contact your carrier’s fraud team, your bank and, where one exists, your country’s fraud reporting service. If an ex-partner may be involved, also speak to a domestic abuse or stalking advocate.

At work, school or with services

If a work account is affected, tell the IT or security team right away. Treat any message sent from your number or email during that window as suspect.

Using this label fairly

  • Reading a one-off dropped signal or a stray verification code as a SIM swap can cause alarm that the facts do not support. The first check is your carrier’s account history.
  • Blaming one person based only on timing can turn a technical fraud into a family or workplace accusation.

How it differs from look-alikes

Watching a former partner’s life is what Stalking & Surveillance (Post-Separation) means. A SIM swap can be a route to it, because it sends that person’s messages and codes elsewhere.

Strangers also do it for money, with no personal link. Legal Abuse works through courts and paper, in the open.

A swap works quietly through accounts and is found by what stops working. Forced Submission needs the person’s own words, but a swap takes control with no input from them.