Fraudulent mobile number porting

Attention: open in a new window. Print

Beware and prevent identity theft

Cyber criminals are using a simple trick to steal people’s mobile phone numbers, move them to a different carrier and use the stolen number to gain access to the victim’s other personal information, including their bank and MyGov accounts.

It’s a surprisingly easy thing to accomplish and can wreak havoc for those who unwittingly become a target. In most instances, fraudsters simply need an account number for your mobile provider and your date of birth.

Given that most important accounts rely on two-factor authentication, which involves receiving a text message code to log into the account, pinching someone’s mobile phone number can give criminals serious access to your digital life. This is very concerning as these scams can be quite detrimental to consumers. The implications of fraudulent number porting for consumers can be very serious and include but are not limited to financial loss, negative credit ratings, and emotional stress. Once a consumer has had their identity stolen, it can be very difficult and time-consuming to reverse the effects.

How to tell your number has been ported

  • A sign that your number has been ported is that your phone will show ‘SOS only’ where the reception bars usually appear.

What to do if you have been scammed

  • Contact your mobile provider. They will be able to tell you whether your number has been ported. If it has been ported by a scammer, ask them to port it back.
  • Contact your bank to see whether scammers have accessed your bank account. Let your bank know of any fraudulent transactions straight away.
  • Change your passwords on your online accounts for social media, banking, emails and other important accounts.
  • Scammers may try to steal personal information from your close contacts using your accounts. It is a good idea to let your family and close friends know to watch out for strange emails and messages sent from your account if you have been scammed.
  • Report the scam to Scamwatch and the Australian Cybercrime Online Reporting Network (ACORN).
  • For help with identity fraud, you can contact IDCare.

What can you do to protect yourself?

  1. Ask your mobile provider and your bank to set up a secret pin number or password that only you know, to identify yourself when you call them or deal with them in person.
  2. Check your social media profiles on Facebook, Twitter and LinkedIn to ensure your mobile number is hidden from public viewing (remember to check resumes and work documents that are available online). Also, find out if your mobile number is listed online anywhere and have it taken down. You can do this by Googling your mobile number.
  3. Remove your birthdate from public view on social media. Use a fake birthdate when you sign up. Do not use real personal information for security questions; make up a best friends name or mother’s maiden name. Remember a scammer can work out your birthdate from photos of birthday celebrations, or a happy birthday message from a friend.
  4. Create strong passwords for your online accounts and use different passwords for different accounts..
  5. Wherever possible, use two step verification (one time password) to login to your online accounts. Two step verification is when you are sent a verification code that needs to be entered before you can login to an account. The code is usually sent to a mobile number or email address.
  6. Scammers can gain personal information about you by stealing your physical mail. Make sure you have a lock on your physical letter box, and keep your home street address offline. Google your address alongside your name to see if it is listed anywhere.
  7. Be security conscious on Facebook and online generally. Do not list your family’s names online anywhere; if you have connected them in your Facebook profile hide or delete these links. Hide your friends list from public and friends’ view. If a scammer can see your friends list, they can then copy your Facebook profile to impersonate you, and then approach them using a fake profile. Never accept a friend request from someone you are already friends with on Facebook as it may be a fake profile.
  8. Install anti-virus software on your computer, tablet and smartphone to ensure your devices are protected from hackers. Regularly run anti-virus scans. Ensure that the software for your anti-virus and operating system are up to date.


Name *
Submit Comment