SIM Swap

A targeted attack where a fraudster convinces (or bribes) your mobile carrier to transfer your phone number to a SIM they control. With your number they receive SMS 2FA codes and password-reset texts, allowing them to take over exchange accounts, email, and social media. SMS-based 2FA is highly vulnerable to SIM swaps; authenticator apps and hardware security keys are not. The FBI's IC3 has reported millions of dollars in annual losses to this single attack pattern.