Scammer Alert!

[dr. d]

Naka-activate ang PIN sa SIM1 ko. Humihingi lang naman ng PIN upon turning on the phone. If gusto ng karagdagang security, turn on screen lock ng phone...required 'to for CitiPayAll. Most banking apps require PIN or password para ma-access ang app. For Own Bank App, it does not require PIN/password when accessing the app pero required ang mobile PIN before maka-transfer ng funds. Grab app does not require PIN/password when accessing the app, pero who puts big amount in their GrabPay Wallet?
Itong post niya dko ma-imagine paano nangyari.

my suspicious mind,

some folks pretend that they got scammed, to place them in an "exploitable position"...

[Dr.Kamiya]

I'd agree maybe the twitter poster is exaggerating a bit, but having someone gain control of your SIM is a real enough vulnerability that the US FCC is taking SIM swap scams seriously.

The FCC says new rules will curb SIM swapping. I’m pessimistic | Ars Technica

The scams, known as "SIM swapping" and "port-out fraud," both have the same objective: to wrest control of a cell phone number away from its rightful owner by tricking the employees of the carrier that services it. SIM swapping occurs when crooks hold themselves out as someone else and request that the victim's number be transferred to a new SIM card—usually under the pretense that the victim has just obtained a new phone. In port-out scams, crooks do much the same thing, except they trick the carrier employee into transferring the target number to a new carrier.

This class of attack has existed for well over a decade, and it became more commonplace amid the irrational exuberance that drove up the price of Bitcoin and other crypto currencies. People storing large sums of digital coin have been frequent targets. Once crooks take control of a phone number, they trigger password resets that work by clicking on links sent in text messages. The crooks then drain cryptocurrency and traditional bank accounts.

In case of a snatched phone, there's no SIM-swap going on because they already have your physical SIM, but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

[BratPAQ]

I'd agree maybe the twitter poster is exaggerating a bit, but having someone gain control of your SIM is a real enough vulnerability that the US FCC is taking SIM swap scams seriously.

The FCC says new rules will curb SIM swapping. I’m pessimistic | Ars Technica



In case of a snatched phone, there's no SIM-swap going on because they already have your physical SIM, but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

I'm contemplating on switching to e-sim. Unlike physical sim hindi basta basta ma transfer sa ibang phone. Although I'm not sure sa Smart postpaid ko kung gano ka hirap mag transfer sa bagong phone. Sa Globe eh pupunta ka pa talaga sa Globe store to be able to transfer your e-sim. Kinda hassle Lang na you have to line up sa kanila everytime you change your phone. Pero at the same time more secured.

[thephantom]

I'm contemplating on switching to e-sim. Unlike physical sim hindi basta basta ma transfer sa ibang phone. Although I'm not sure sa Smart postpaid ko kung gano ka hirap mag transfer sa bagong phone. Sa Globe eh pupunta ka pa talaga sa Globe store to be able to transfer your e-sim. Kinda hassle Lang na you have to line up sa kanila everytime you change your phone. Pero at the same time more secured.

It used to be that the QR code can be used to transfer multiple times. That's what I have. Since getting an esim from smart I've transferred to different phones already. I've done repeat transfers as well (phone A to phone B to phone C to phone A, etc). All using the same QR code. When we got another esim just last month for another number, the instructions were you can remove and reinstall multiple times on the SAME phone but need a new QR if transferring to a new phone.

Sent from my SM-F946B using Tsikot Forums mobile app

[Walter]

but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

No, it's not enough ... not applicable these days ... also, you should avoid using SMS 2FA whenever possible ...