Rising Threat: Mobile Fraud Targets Phone Numbers in Australia Australia’s communications regulator and Scamwatch have issued a warning about a surge in mobile fraud, where scammers hijack phone numbers to gain unauthorized access to accounts. This method exploits the growing reliance on phone numbers as a security layer, allowing attackers to bypass protections faster than traditional hacking. How It Works Mobile fraud often executed through SIM swapping or account takeovers involves scammers impersonating victims to transfer their phone numbers to a new SIM or modify account details. Once in control, they intercept verification codes, reset passwords, and lock users out of banking, government services (like myGov), email, and other linked accounts. A single breach can trigger a domino effect, compromising multiple services. Who’s at Risk? Anyone with a mobile phone is vulnerable, particularly those whose data has been exposed in breaches, reuse passwords, or have weak email security. Scammers leverage stolen personal information to convince mobile providers to authorize changes, making their requests appear legitimate. Warning Signs Early indicators of mobile fraud include: - Unexpected alerts about account changes - Unsolicited verification codes or password reset emails - Login attempts from unknown devices - Sudden loss of signal or "SOS only" mode (a red flag for number transfer) Immediate Steps if Targeted Victims should: 1. Contact their bank to block unauthorized transactions. 2. Notify their mobile provider via an official number to secure the account (e.g., placing a SIM lock or port freeze). 3. Reset passwords, prioritizing email and banking accounts, and enable multi-factor authentication (preferably app-based, not SMS). 4. Monitor accounts for unusual activity and seek assistance from services like IDCARE if personal data is compromised. Prevention Measures To reduce risk, users are advised to: - Avoid clicking suspicious links or downloading unexpected attachments. - Verify communications by contacting providers through official channels. - Use strong, unique passwords and update them regularly. - Minimize sharing sensitive documents and delete emails containing personal data. - Consider security tools to block phishing attempts and malicious links. Key Facts - Scammers can access bank accounts by controlling a victim’s phone number. - Fraud can occur without direct user interaction, often via data breaches or provider impersonation. - SIM swapping involves transferring a number to a scammer-controlled SIM. - App-based multi-factor authentication is more secure than SMS-based methods. - Sudden signal loss may indicate a number takeover, requiring immediate action.