Using a card reader to sign in online

sausage_time

You should be able to set a SIM lock code on your phone.  On my Samsung, Settings, SIM Manager, More SIM Settings, SIM Security.

DullGreyGuy

I think people are talking about a SIM PIN, which even dumb phones supported a long time before the idea of a a banking app on a phone was even existed. Means if someone takes your sim out and puts it in their phone they need to enter a pin before the sim will work again. 3 false guesses and it requires a PUK code instead, 10 wrong guesses of that and the sim is junk.

This doesn't however prevent someone managing to get your network provider to port your number onto a new sim. That can be done without them ever touching your phone 

flaneurs_lobster

sausage_time said:

You should be able to set a SIM lock code on your phone.  On my Samsung, Settings, SIM Manager, More SIM Settings, SIM Security.

This. Don't set it to be the same as your phone unlock code.

You might need the default code on the SIM to change it, these vary from network to network and are readily available by Googling.

If you've got an online account with your mobile co then check there if you can set/change PIN / codes for changing details or swapping SIMS.

tribetown

DullGreyGuy said:

This doesn't however prevent someone managing to get your network provider to port your number onto a new sim. That can be done without them ever touching your phone 

What is the best way to prevent this, if any?

tribetown

flaneurs_lobster said:

sausage_time said:

You should be able to set a SIM lock code on your phone.  On my Samsung, Settings, SIM Manager, More SIM Settings, SIM Security.

This. Don't set it to be the same as your phone unlock code.

You might need the default code on the SIM to change it, these vary from network to network and are readily available by Googling.

If you've got an online account with your mobile co then check there if you can set/change PIN / codes for changing details or swapping SIMS.

Thank-you both, I have found the code and how to reset it on my phone.

DullGreyGuy

tribetown said:

DullGreyGuy said:

This doesn't however prevent someone managing to get your network provider to port your number onto a new sim. That can be done without them ever touching your phone 

What is the best way to prevent this, if any?

The previously linked article on Natwest's site has some tips, I'd add to theirs by saying always ensure you do react to real messages/notifications that you weren't expecting.

Our company (multinational insurance services firm) did a test the other day sending everyone a "confirm you just tried to log in" via the 2FA app we use. About 1/3 clicked "yes its me" despite us all allegedly being fairly bright financial professionals.

The networks have their own controls so some may say select the one with the best controls but that is going to be very hard to objectively test. Sure if a sim swap is being done maybe the system is supposed to trigger something in their app on your phone but does the person doing the swap have a way to override the lack of an authorisation or suppress the message?

Can think of multiple ways someone could be convinced to avoid normal protocols and not send the message if the system allows an override. 

Eyeful

1. The bank that wants you to uses SMS, see if the will allow you to use an  Authenticator app.
This is more secure than the SMS method. You can look up Authenticator Apps on YouTube. 

2. The following may be of interest & help to you:
https://2fa.directory/gb/#banking

tribetown

DullGreyGuy said:

tribetown said:

DullGreyGuy said:

This doesn't however prevent someone managing to get your network provider to port your number onto a new sim. That can be done without them ever touching your phone 

What is the best way to prevent this, if any?

The previously linked article on Natwest's site has some tips, I'd add to theirs by saying always ensure you do react to real messages/notifications that you weren't expecting.

Thank-you for the tips and the link, which I did read when you posted it.

tribetown

Eyeful said:

1. The bank that wants you to uses SMS, see if the will allow you to use an  Authenticator app.
This is more secure than the SMS method. You can look up Authenticator Apps on YouTube. 

2. The following may be of interest & help to you:
https://2fa.directory/gb/#banking

Unfortunately that bank does not have the option to use an Authenticator app, I di use one where possible.
Thanks for the link.

tribetown

I have been doing a lot of reading of previous threads on this subject and also on my mobile phone SIM company website and found this,

"To protect our customers from SIM swap fraud, a swap can only be carried out on a "Replacement SIM" that we have posted to the customer.

It is not possible for our systems to SIM swap to a SIM already in a scammers possession, or one from another customer, etc."