How SIM swapping works
An attacker convinces your mobile carrier to move your number to their SIM, often using social engineering or stolen personal data. They then receive your SMS codes.
Why it hurts crypto users
SMS-based 2FA and account recovery can be defeated once the attacker controls your number, letting them into exchanges and email tied to your funds.
Stronger protection
Use an authenticator app or hardware security key instead of SMS wherever possible. Add a carrier PIN, limit the personal data you expose, and never store seed phrases in email.