{"success":true,"data":{"id":"fake-mobile-carrier-sim-swap-account-takeover-phish","label":"Fake mobile carrier SIM swap / account takeover phishing — non-carrier sender impersonates AT&T, Verizon, or T-Mobile claiming an unauthorized SIM swap or port-out is in progress and demands account PIN or Social Security Number to \"cancel\" the transfer","description":"Phishing emails impersonating AT&T, Verizon, T-Mobile, or a generic \"mobile carrier\" and falsely claiming that a SIM swap or port-out request has been initiated on the victim's account. The email creates urgency — \"cancel within 24 hours or your number will be permanently transferred\" — and directs the victim to verify their account PIN, provide Social Security Number digits, or call a callback number. The real goal is to harvest credentials so the attacker can complete the actual SIM swap and seize 2FA-protected accounts (email, bank, crypto). Key facts: (1) SIM swap fraud surged 400% from 2021–2024 per FCC, with losses exceeding $68M; (2) Real carriers AT&T, Verizon, and T-Mobile NEVER request account PINs or SSNs via email links — all legitimate account actions happen through the My AT&T / My Verizon / T-Life apps or verified carrier websites; (3) Legitimate carrier emails are sent from @att.com, @verizonwireless.com, or @t-mobile.com — lookalike domains (att-account-alerts.com, verizon-security-center.net) are always fraudulent; (4) If you receive a real port-out warning, call the number on the back of your SIM card — not any number in the email. Warning signs: non-carrier sender domain, request for PIN or SSN, urgency window, click-to-cancel link.","tier":"danger","category":"phishing","isThin":false}}