Start with the account behind your phone number. Give it a unique password, check who can make changes, and look for separate protections against SIM changes and number transfers. Before enabling a lock, find out how you would recover access if your phone were lost.
Your carrier account is different from your Apple or Google account. It manages your mobile service, and your number may also receive sign-in or recovery codes for other services.
SIM swapping and port-out fraud: what is the difference?
A SIM swap moves service to a replacement SIM or eSIM. A port-out moves a number to another provider. Both can be legitimate changes; the problem is someone arranging one without your permission. Verizon documents separate safeguards for SIM changes and number transfers.
Someone controlling your number may receive SMS verification codes intended for you. That is why protecting the carrier account belongs alongside protecting your main email and other essential accounts, not just locking the phone screen. The FTC explains the account risks of SIM swapping.
Know which password, PIN, or lock you are changing
Names vary by carrier. Read the description rather than assuming that every setting called a PIN protects the same thing.
| Control | What to check | Important distinction |
|---|---|---|
| Online account password | Is it unique, and can only the intended users sign in? | Protecting the website login is not the same as blocking every service change. |
| Carrier account PIN or passcode | Does your provider offer one for verifying account access or changes? | Use the carrier’s instructions; this is not necessarily your SIM PIN. |
| Number or port-out lock | Does it block transfers to another provider? | Ask whether protection applies to each line separately. |
| SIM-change protection | Does it restrict replacing a SIM or moving service to another device? | Do not assume a port-out lock also covers SIM changes. |
| SIM PIN | Does it lock use of the current SIM or eSIM? | It is not a substitute for protecting the carrier account. |
Apple describes a SIM PIN as a lock on calls and cellular-data use through the SIM or eSIM. Do not guess a SIM PIN or PUK: incorrect attempts can leave you needing a replacement. Use Apple’s SIM PIN guidance and your carrier’s help if you want this additional device-level protection.
A 20-minute carrier account review
1. Open the real account and identify its owner
Use the carrier app you already know or type its official address. Avoid sign-in links in unexpected texts. Australia’s ACMA recommends checking suspicious contact against a number on your bill, the official website, or the app. See its mobile-number fraud guidance.
For a family plan, involve the account owner. Check the names and roles of people authorized to manage lines. Agree who needs to make changes before removing anyone. Someone using a phone is not necessarily the person who controls its billing account; our shared versus separate accounts guide explains that distinction.
2. Protect sign-in and recovery
Set a unique password if yours is reused, and enable the strongest sign-in method your carrier offers that you can reliably use. Check the recovery email and any account PIN or passcode. Store credentials privately, for example in a password manager.
Ask how recovery works if you cannot receive texts on this number. Record the official support route somewhere you can reach without the phone. Do not sign out of your only working session just to test a lockout.
3. Check transfer and SIM protections separately
Look under security, account settings, or line management. Before turning a protection on, read which changes it blocks, who can turn it off, and whether there is a delay before a planned change can proceed.
United States — Verizon example. In My Verizon, the documented route is Me → Edit profile and settings → Security, then SIM Protection or Number Lock. Check each intended number. Verizon says Number Lock must be off for a port-out and prevents generating a Number Transfer PIN while enabled. SIM Protection can also block legitimate upgrades or SIM changes; consult the current instructions and delay notices before replacing a phone.
Canada — Rogers example. Rogers describes an authorization text for transferring a number to another carrier. For a genuine Rogers request you did not initiate, its instructions say to reply NO; an unanswered request cancels after 90 minutes. Verify an unexpected message through the official support route, and never approve a transfer merely because a caller tells you to. This is Rogers’ process, not a universal Canadian rule: read its transfer-authorization instructions.
Australia — ask your telco. Use your provider’s official support to ask what additional fraud protections it can put on your account and how recovery works. ACMA’s April 2026 alert encourages prompt action on suspicious changes and discusses requesting additional protections. Do not assume Australian plans have a switch with the same name as a US carrier’s feature.
If a setting is absent, that does not prove it is unavailable. Ask support about your exact plan and line; prepaid, business, and reseller arrangements can differ.
4. Reduce reliance on this number elsewhere
For important accounts that support them, consider an authenticator app or security key instead of SMS-only verification. The FTC recommends these alternatives for SIM-swap concerns. Set up and test the replacement and save recovery options before removing an existing method. Our two-step verification guide walks through that sequence.
5. Save a short household access note
Record the carrier, account owner, lines checked, protection names, check date, and official recovery contact route. Keep passwords, PINs, and verification codes out of an ordinary shared checklist. Store those only where the appropriate people can access them securely.
Here is a question you can use with official support:
I want to protect my number from unauthorized SIM changes and transfers to another provider. Which protections are available for my plan, who can disable them, and how do I recover access if I lose my phone?
If your phone suddenly loses service
Loss of signal alone does not establish fraud. Check the carrier’s official outage information, but treat an unexplained loss of service alongside an unexpected account-change alert as urgent. ACMA lists unsolicited codes, unfamiliar reset attempts, and sudden “SOS only” service among warning signs to investigate.
- Contact the carrier promptly from another phone or a trusted connection. Use its official support details. Explain the alerts and timing, and ask whether a SIM change or port-out occurred without authorization.
- Ask for the official recovery process and a case reference. Keep the messages and times for that conversation. Do not approve new changes to “cancel” an attack on an unsolicited caller’s instructions.
- Check other important accounts. After regaining your number, update affected passwords. Report unfamiliar financial activity directly to the institution. The FTC’s response advice covers these checks. If email also shows unfamiliar access, follow our email recovery guide.
Before a planned phone change
Check the carrier’s requirements before moving a SIM, activating an eSIM, or changing providers. A protection can intentionally block the change you want. Use only the official process to lift the relevant restriction when needed, then confirm what protection is active after the move. Follow the new-phone checklist before erasing the old device.
You have finished today’s review when you know who controls one line, which protections are active, and how to contact the carrier without depending on that phone. These steps reduce risk; they do not guarantee that a number cannot be taken over.
