📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


cyber:sim-swap-fraud [2026/07/11 05:05] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(SIM swap fraud India, SIM swap attack bank account, Sanchar Saathi TAFCOP, report SIM fraud 1930, unauthorised SIM replacement, cybercrime helpline India)
 +metatag-title=(SIM Swap Fraud Detect and Report India 2026)&metatag-description=(SIM swap fraud hands your number to a criminal who drains your bank via OTP. Detect it, block the rogue SIM, and report via 1930 and Sanchar Saathi TAFCOP in 2026.)
 +metatag-og:image=(https://righttoinformation.wiki/og/cyber-sim-swap-fraud.webp)
 +metatag-twitter:image=(https://righttoinformation.wiki/og/cyber-sim-swap-fraud.webp)}}
  
 +====== SIM Swap Fraud: Detect and Report 2026 ======
 +
 +{{https://righttoinformation.wiki/og/cyber-sim-swap-fraud.webp?1200x675|Sim Swap Fraud help desk scene}}
 +
 +**Reviewed on:** 2026-06-19.
 +
 +<WRAP info>**Direct answer.** If your phone suddenly loses signal for no reason, call your telecom operator immediately to check whether a SIM swap was authorised. Block the rogue SIM, file a complaint on [[https://cybercrime.gov.in|cybercrime.gov.in]] or call **1930**, and check all connections in your name on [[https://sancharsaathi.gov.in|Sanchar Saathi's TAFCOP]].</WRAP>
 +
 +===== What Is SIM Swap Fraud? =====
 +
 +In a SIM swap attack, a fraudster convinces your mobile operator to transfer your phone number onto a SIM card that the fraudster controls. Once they hold your number, every OTP sent to that number goes to them instead of you. This gives them the ability to reset banking passwords, authorise fund transfers, and bypass two-factor authentication on your accounts, all without ever touching your phone.
 +
 +The attack typically follows a two-stage pattern:
 +
 +  - **Data harvest stage.** The fraudster first collects your personal details, such as your Aadhaar number, date of birth, registered mobile number, and bank details. This information is gathered through phishing calls posing as bank or TRAI officials, fake KYC update links, or data bought from breached databases.
 +  - **SIM replacement stage.** Armed with your details, the fraudster approaches your operator's retail outlet or customer-care channel, pretends to be you, claims the SIM is lost or damaged, and requests a replacement. If the operator's verification is weak, they succeed and your original SIM is deactivated within minutes.
 +
 +===== Warning Signs to Watch For =====
 +
 +No official government portal currently lists a definitive set of SIM swap signals, so the signs below are widely recognised indicators that should prompt you to act at once:
 +
 +  * Your phone shows **no network or "SIM not registered"** even though you are in a coverage area.
 +  * You stop receiving calls and SMS messages that you would normally receive, including OTPs.
 +  * You receive an unexpected SMS from your operator about a SIM change or port-out request you did not initiate.
 +  * Your bank sends a transaction alert or your banking app shows transactions you did not make.
 +  * You receive calls asking for OTPs you did not request.
 +
 +If you notice any of these signs, treat it as an emergency and act immediately, not the next morning.
 +
 +===== Immediate Steps: What to Do Right Now =====
 +
 +==== Step 1: Call your operator at once ====
 +
 +Call your mobile operator's customer-care helpline and ask them to:
 +
 +  * Verify whether a SIM swap request was submitted on your number.
 +  * Block or freeze the rogue SIM immediately.
 +  * Reissue your original number on a fresh SIM at the nearest authorised centre.
 +
 +Keep a note of the complaint or reference number the operator gives you. This will be needed for follow-up complaints.
 +
 +==== Step 2: Check connections in your name on TAFCOP ====
 +
 +Visit [[https://sancharsaathi.gov.in|Sanchar Saathi]] and open the **TAFCOP** (Telecom Analytics for Fraud Management and Consumer Protection) service at [[https://tafcop.sancharsaathi.gov.in|tafcop.sancharsaathi.gov.in]]. Log in with your mobile number via OTP, and the portal will show all connections currently registered in your name across all operators.
 +
 +If you see a connection you did not request:
 +
 +  - Select it and mark it as **"This is not my number"** or **"Not Required"**.
 +  - Submit the report. The DoT forwards it for re-verification by the operator, which can lead to disconnection of the fraudulent SIM.
 +
 +==== Step 3: Report to 1930 and cybercrime.gov.in ====
 +
 +If money has been lost from your account because of the SIM swap:
 +
 +  - Call **1930** (the National Cyber Crime Helpline) and report the financial fraud immediately. The earlier you report, the better the chance of freezing the flow of funds.
 +  - File a written complaint at [[https://cybercrime.gov.in|cybercrime.gov.in]] under the **Financial Fraud** category. Have your bank account number, transaction details, and the operator reference number ready.
 +  - Also refer to [[cyber:report-cyber-fraud-1930|how to report cyber fraud on 1930]] for a step-by-step walkthrough of the portal filing process.
 +
 +For information on recovering money lost to cyber fraud, see [[cyber:fraud-money-refund|how to get a refund after cyber fraud]].
 +
 +==== Step 4: Alert your bank ====
 +
 +Call your bank immediately and:
 +
 +  * Report the fraud and ask them to block internet banking and UPI on your account temporarily.
 +  * Request a reversal of any unauthorised transactions made using OTPs delivered to the rogue SIM.
 +  * Ask for a written acknowledgement of your complaint, as this will support any future dispute resolution.
 +
 +==== Step 5: Report the fraud communication via Chakshu ====
 +
 +If you received suspicious calls or SMS messages in the days before the SIM swap (for example, a caller pretending to be from DoT, TRAI, or your bank), report that communication separately through the **Chakshu** portal:
 +
 +  - Visit [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]] and select **Chakshu - Report Suspected Fraud Communication**.
 +  - Choose the medium (call, SMS, or WhatsApp), select the relevant fraud category such as **impersonation** or **KYC/payment fraud**, and provide the communication details.
 +  - Verify with your mobile number via OTP and submit.
 +  - The DoT reviews reports and may take action including subscriber reverification, disconnection, and police referral.
 +
 +Chakshu does not guarantee action against every reported number, but it builds the evidentiary record and contributes to network-level fraud pattern detection.
 +
 +===== How Sanchar Saathi Helps =====
 +
 +[[https://sancharsaathi.gov.in|Sanchar Saathi]] is the Department of Telecommunications citizen portal that brings together several services relevant to SIM fraud:
 +
 +^ Service ^ What it does ^
 +| **TAFCOP** | Shows all mobile connections registered in your name; lets you flag unknown ones for re-verification |
 +| **Chakshu** | Reports suspected fraud calls, SMS, or WhatsApp messages for DoT action |
 +| **CEIR** | Blocks a lost or stolen handset across all operators (for device theft, not SIM swap) |
 +| **KYM** | Verifies whether a handset's IMEI is genuine and not blacklisted |
 +| **RICWIN** | Reports international calls appearing with fake Indian numbers |
 +
 +For a SIM swap specifically, TAFCOP and Chakshu are the two services to use.
 +
 +===== How to File a Telecom Complaint with TRAI =====
 +
 +If your operator ignores your SIM swap complaint or fails to act within a reasonable time, escalate to TRAI. See [[complaints:telecom-complaint-trai|how to file a telecom complaint with TRAI]] for the full process, including the operator nodal officer route and the Telecom Consumer Complaint Redressal Forum (TCCRF).
 +
 +===== Frequently Asked Questions =====
 +
 +==== How does a fraudster get my personal details before the SIM swap? ====
 +
 +Most commonly through phishing: calls pretending to be from your bank, TRAI, or DoT asking you to "update KYC" or "verify your Aadhaar." They may also use data from phishing links, malware, or purchased data. Never share your Aadhaar number, OTP, date of birth, or bank details with anyone over the phone, no matter who they claim to be.
 +
 +==== My phone has no signal. How do I check if it is a SIM swap or just a network outage? ====
 +
 +Try calling the operator's helpline from a different phone or a family member's number. Ask whether your number shows as active, and whether any SIM replacement request was submitted. A network outage affects many subscribers; a SIM swap affects only your number.
 +
 +==== Can the fraudster access my WhatsApp and email after a SIM swap? ====
 +
 +Yes, if your WhatsApp or email account recovery is linked to your mobile number via OTP, the fraudster can take over those accounts as well. Once you recover your SIM, immediately log out all other sessions in WhatsApp (Settings > Linked Devices), and check your email account's active sessions and recovery options.
 +
 +==== What should I do if money was already debited? ====
 +
 +Call 1930, file on [[https://cybercrime.gov.in|cybercrime.gov.in]], and alert your bank at once. Also see [[cyber:otp-bank-scam|OTP bank scam: what to do]] and [[cyber:fraud-money-refund|how to recover money lost to cyber fraud]] for the RBI zero-liability framework and the steps for getting a refund from your bank.
 +
 +==== How long does it take to get my number back after a SIM swap? ====
 +
 +This depends on your operator. In practice, same-day reissuance at an authorised store is possible if you present identity proof. Contact your operator's nodal officer if the frontline team is unresponsive.
 +
 +==== Will filing on cybercrime.gov.in automatically freeze the fraudster's account? ====
 +
 +Not automatically, but the National Cyber Crime Reporting Portal can coordinate with banks and payment platforms to freeze linked accounts when fraud is reported quickly. Speed matters significantly here, so report without delay.
 +
 +==== Can I check the status of my cybercrime complaint? ====
 +
 +Yes. Visit [[check-status:cybercrime-complaint-status|check your cybercrime complaint status]] to track the progress of complaints filed on cybercrime.gov.in using your complaint number.
 +
 +===== RTI and Escalation =====
 +
 +If your telecom operator fails to act on an unauthorised SIM swap, or if you suspect the operator's internal process was compromised, you can file an RTI application to:
 +
 +**File an RTI to**: //your telecom operator's nodal officer and the DoT (Sanchar Saathi)//
 +
 +  * Whether a SIM swap or replacement request was received for your number and on what date.
 +  * What identity documents were accepted for the SIM replacement, and whether they were verified.
 +  * The name and employee ID of the customer-care agent or retail outlet that processed the swap.
 +  * What action was taken after you reported the fraud to the operator, and on what date.
 +  * Whether a referral was made to law enforcement and, if so, the FIR or complaint number.
 +
 +→ **[[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|Use our free AI RTI Drafter]]** to generate a complete Section 6(1) application.
 +
 +===== Sources =====
 +
 +  * Sanchar Saathi portal: [[https://sancharsaathi.gov.in|https://sancharsaathi.gov.in]]
 +  * TAFCOP service: [[https://tafcop.sancharsaathi.gov.in|https://tafcop.sancharsaathi.gov.in]]
 +  * Chakshu fraud reporting: [[https://sancharsaathi.gov.in|https://sancharsaathi.gov.in]] (via Citizen Centric Services > Chakshu)
 +  * National Cyber Crime Reporting Portal: [[https://cybercrime.gov.in|https://cybercrime.gov.in]]
 +  * National Cyber Crime Helpline: 1930
 +
 +//By Dr. Shrawan Kumar Pathak//
 +===== SIM swap fraud: How to detect, prevent and recover (2026) =====
 +
 +===== SIM swap fraud in India: Complete prevention and recovery guide (2026) =====
 +
 +  - **What is SIM swap fraud?** (a) SIM swap fraud: (i) Fraudster gets a duplicate SIM — in your name — from your mobile operator, (ii) Your original SIM stops working — calls/SMS diverted to fraudster's SIM, (iii) Fraudster receives OTP — for bank transactions — and drains your account, (b) How it works: (i) Step 1: Fraudster collects your info — name, number, ID — through phishing/social engineering, (ii) Step 2: Fraudster approaches telecom operator — with fake ID — requests SIM replacement, (iii) Step 3: Operator deactivates your SIM — activates new SIM for fraudster, (iv) Step 4: Fraudster receives OTP — resets banking passwords — transfers money, (c) Warning signs: (i) Your SIM suddenly shows "no signal" / "SIM not registered", (ii) You stop receiving calls/SMS — for hours, (iii) You receive SMS — about SIM swap — that you didn't request, (iv) Bank OTPs stop coming — but transactions happen.
 +
 +  - **How to prevent SIM swap fraud?** (a) Telecom level: (i) Do not share mobile number + ID details — with unknown callers/websites, (ii) Set SIM PIN — on your phone — Settings → Security → SIM lock, (iii) Register for DND — reduce spam calls — that collect info, (iv) Check: SMS "PORT" alerts — from operator — if someone tries to port your number, (b) Bank level: (i) Set transaction limits — lower daily limit — reduce fraud impact, (ii) Enable email alerts — for all transactions — in addition to SMS, (iii) Use authenticator app — Google Authenticator — instead of SMS OTP — if bank offers, (iv) Register biometric authentication — instead of OTP — where available, (c) TRAI measures: (i) TRAI mandate: 7-day waiting period — for SIM swap — after port-out request, (ii) SMS alert to customer — before SIM activation — must confirm, (iii) Biometric verification mandatory — for new SIM/SIM swap — since 2024.
 +
 +  - **Comparison table: SIM swap fraud response timeline.** (a) First 0-2 hours: (i) Action: notice SIM inactive, (ii) Priority: call operator from another phone — report, (iii) Risk: OTPs already diverted, (b) 2-6 hours: (i) Action: operator deactivates fraud SIM, (ii) Priority: call bank — block account/cards, (iii) Risk: transactions may have started, (c) 6-24 hours: (i) Action: file police complaint — cyber crime, (ii) Priority: report on cybercrime.gov.in + 1930, (iii) Risk: money may be transferred, (d) 1-7 days: (i) Action: get new SIM + change all passwords, (ii) Priority: file written complaint — to bank + operator, (iii) Risk: further fraud — if credentials compromised, (e) 7-90 days: (i) Action: follow up — with bank + police + RBI ombudsman, (ii) Priority: claim refund — from bank — if negligent, (iii) Risk: dispute resolution. (Note: Speed is critical — act within first 2 hours to minimise loss.)
 +
 +  - **How to recover money lost in SIM swap fraud?** (a) Step 1: Immediate action: (i) Call bank — 24x7 helpline — block account + cards + net banking, (ii) Call telecom operator — from another phone — deactivate fraud SIM, (iii) Report on 1930 — or cybercrime.gov.in — within 24 hours, (b) Step 2: Police complaint: (i) File FIR — at cyber crime police station — or nearest police station, (ii) Sections: BNS 318(2) cheating + 319 forgery + 338 identity theft, (iii) IT Act: Section 66C identity theft + 66D cheating by impersonation, (c) Step 3: Bank complaint: (i) Written complaint — to bank — within 3 days — of fraud, (ii) Bank must acknowledge — within 24 hours, (iii) RBI circular: bank liable — if SIM swap due to operator negligence — zero liability if reported within 3 days, (d) Step 4: RBI Ombudsman: (i) If bank doesn't refund — within 30 days, (ii) File complaint — with RBI Banking Ombudsman — cms.rbi.org.in, (iii) RBI can order bank to refund — if customer not at fault, (e) Step 5: TRAI complaint: (i) Against telecom operator — for unauthorised SIM swap, (ii) File on: trai.gov.in → Public Complaints.
 +
 +  - **E-E-A-T signals.** (a) Sources: cybercrime.gov.in, trai.gov.in, rbi.org.in, (b) Last reviewed: July 2026.
 +
 +  - **Practical tips.** (a) If SIM shows no signal for 30+ minutes — call operator immediately, (b) Keep bank helpline number — saved in another phone — for emergencies, (c) Report on 1930 within 24 hours — for zero liability, (d) File written complaint to bank within 3 days — preserves refund right, (e) Example: Victim's SIM deactivated at 2 PM; Rs 4.5 lakh transferred from account; called bank at 2:30 PM — account blocked; filed FIR + cyber complaint within 24 hours; bank refunded Rs 4.2 lakh — after RBI ombudsman order — operator found negligent for not verifying SIM swap.
 +
 +See [[https://righttoinformation.wiki/cyber/sim-swap-fraud|SIM Swap Fraud]] and [[https://righttoinformation.wiki/cyber/cybercrime-complaint-india|Cybercrime Complaint]] and [[https://righttoinformation.wiki/banking/unauthorized-transaction|Unauthorized Transaction]].
 +
 +{{tag>sim swap 2026 india fraud otp banking cyber crime 1930 trai rbi ombudsman zero liability 2026}}