SIM swapping on a trip: how to tell a hijacked number from a roaming glitch
In a SIM swap, a criminal convinces your mobile operator to move your number to a SIM card they hold, and from then on your texts and verification codes go to them. The first sign is usually that your line loses service for no clear reason. Abroad that is easy to put down to roaming, so the useful work happens before you leave: lock down the line, move your logins away from SMS and know how to reach your operator from another country.
See the Europe eSIMWhat a SIM swap is after
The goal is not your phone. It is your number. INCIBE, Spain's national cybersecurity institute, explains that the criminals pose as you to get a duplicate of your SIM card, and then use the verification texts sent to that number to get into your social networks, your email or your online banking. The personal details needed to pass as you usually come from phishing messages, data leaks or what is visible on social media.
Once the duplicate is active, your own SIM stops working on the network. The FBI's Internet Crime Complaint Center describes the same scheme and the same aftermath: password resets go to the new SIM, and with them access to accounts protected by text message codes.
One eSIM for 33 European countries
Several countries on one trip? Same eSIM, same data, no swapping lines at the border.
Black Friday −25 % Ends in 31d 21:04:18Choose your data
For one to two weeks of maps, messaging and the odd video.
Buy up to 180 days before you fly: the plan only starts when the eSIM connects at your destination.
Write the email where we should send the QR code.
We send the QR code and your receipt here. No spam.
QR in your inbox in minutes · If it does not connect, we fix it · Secure payment with Stripe
Will it work on my phone?
On iPhone: Settings → General → About, and scroll to EID. If there is an EID, your phone takes eSIMs. Every iPhone from the XS (2018) onwards does.
On Android: Settings → About phone → Status, and look for EID. If there is an EID, your phone takes eSIMs. Most Galaxy S20, Pixel 3 and later do.
It also has to be carrier-unlocked. If you bought it outright or your contract is over, it almost certainly is.
Not sure about your model? Ask us before you pay and we will tell you — a person answers within 24 hours.
How it works
- 1Choose and payCard, Apple Pay or Google Pay. No account.
- 2Install it at homeThe QR arrives by email. Scan it on wifi in a minute.
- 3Connect when you landTurn on data roaming for the eSIM and you are online.
Why it is harder to notice abroad
INCIBE's warning sign is a phone that loses coverage without a logical reason. In one of its real cases, the victim only realised something was wrong when the phone connected to Wi-Fi and notifications of transfers and online purchases started arriving.
On a trip, losing service is not unusual. Your home line hops between partner networks, you may have turned its data off, and if you use a travel eSIM for internet your apps keep working whatever happens to your number. That is good for your data bill and bad for noticing a hijacked line. It is worth checking your home line in Settings once a day, the same way you check the battery. If it shows no service while the travel eSIM is connected, start with the usual fixes in our guide on manual and automatic network selection. If the line stays dead on every network after a restart, contact your operator.
What to set up before you fly
- Ask your operator what extra protection it offers against SIM changes. The FBI recommends asking carriers to block SIM card changes, call forwarding and simultaneous ring on your account.
- In the US, the FCC has adopted rules for carriers to authenticate customers before a SIM change, notify them of SIM change requests and offer a free lock against moving the number, so ask your carrier which of these it already applies.
- Move important logins from SMS codes to an authenticator app, a passkey or in-app approval. INCIBE and the FBI both recommend app-based verification over text messages.
- Save your operator's customer service number that works from abroad and check that you can sign in to its app or website.
- Never give a PIN or one-time code to someone who calls you. Hang up and call the operator yourself.
Our guide to two-factor authentication on a trip walks through moving Google and Apple accounts away from text codes before you leave.
If your line goes dead and money moves
Speed matters more than the order of the steps. Call your operator and ask it to cancel the duplicate SIM, as INCIBE advises. Then contact your bank through its app or the number on your card to block cards and stop any operations you do not recognise. Change the passwords of your email first, because it is the key to resetting everything else, and then the rest.
Keep evidence: screenshots of messages, the time you lost service and any notifications from the bank. Report it to the police, in Spain to the Policía Nacional or the Guardia Civil, and in the US the FBI asks victims to file at ic3.gov. Spain's INCIBE helpline on 017 can guide you through the steps for free.
Where a data eSIM helps
A data-only eSIM has no phone number, so it is not what a SIM swapper is after, and it does not change when your home line does. If your number is hijacked mid-trip, the travel eSIM keeps your phone online, which means you can still open your bank's app, use the operator's chat or call them over the internet without hunting for Wi-Fi.
That is a side benefit, not protection. The defence against a SIM swap is the setup above: a locked account with your operator and logins that do not depend on a text message reaching your phone. Our guide on bank SMS codes abroad explains how to keep the genuine codes coming while you travel.
How do I know if my SIM has been swapped?
The usual first sign is that your line loses service for no reason, followed by alerts about account changes or payments. If your home line has no service on any network after a restart, call your operator.
Can someone swap my SIM while I am abroad?
Yes. The duplicate is requested from your operator, so it does not depend on where you are. Being abroad only makes it easier to mistake the lost signal for a roaming problem.
Does a travel eSIM protect me from SIM swapping?
No. It has no number and is not affected by the swap, so it keeps you online, but your number and your SMS codes are still at risk. Protection comes from your operator's security options and app-based verification.
What should I ask my operator before travelling?
Whether it offers extra verification or a block on SIM changes and number transfers, and which customer service number works from abroad. The FBI recommends asking for SIM changes and call forwarding to be blocked.
Get your eSIM before you fly: the QR arrives by email in minutes and the plan only starts when you connect at your destination.
See the Europe eSIM