Dangers of moving mobile networks and keeping your number.

Moonwolf

Looking for the safest way to change mobile networks.

I’m currently on O2, out of contract on a rolling monthly ex Virgin SIM only deal which isn’t too shabby as it was heavily discounted and I get Volt etc. My Virgin broadband and TV is for another 12 months.  However I will move mobile networks before April as the most recent price rise will make it uncompetitive.

While I have moved security to authenticator apps or passkeys where supported, there are still enough that I can’t change because they don’t support other than texts, and I have had the same number for over two decades so obviously I want to keep my number. 

Clearly I should request a PAC but reading on here it looks like there is a risk O2 will stop my number immediately, a risk that there are problems with set-up, a risk that a new SIM is intercepted and I become vulnerable to SIM swap fraud and a risk that ordering a SIM first, then providing the PAC to the new company doesn’t work or can’t be done and I lose my number anyway although some people are recommending this route.

Is there any way to get a feel for how really likely these risks are?

Are e-sims more secure, not all companies offer them.

There are some older posts on this but what is the most secure order of operations today.

tia

crumpet_man

Not an answer to your question exactly but I am in a similar situation and am looking to get a new PAYG (one which requires very little chargeable activity to stay active, £10 will last years) and manually update anything important (banks etc) to the new PAYG number.

Then, when I port my day to day number I do not have the additional worry of not being able to access my accounts and it also keeps the accounts related phone number completely separate to my normal number which in my mind is more secure way of doing things.

flaneurs_lobster

crumpet_man said:

Not an answer to your question exactly but I am in a similar situation and am looking to get a new PAYG (one which requires very little chargeable activity to stay active, £10 will last years) and manually update anything important (banks etc) to the new PAYG number.

Then, when I port my day to day number I do not have the additional worry of not being able to access my accounts and it also keeps the accounts related phone number completely separate to my normal number which in my mind is more secure way of doing things.

Now all of this sounds eminently sensible, decent belt'n'braces plan.

The bit that you might find hard is the £10 forever PAYG, there are however always cheap PAYM deals available.

Phones4Chris

Moonwolf said:

...............

Clearly I should request a PAC but reading on here it looks like there is a risk O2 will stop my number immediately, a risk that there are problems with set-up, a risk that a new SIM is intercepted and I become vulnerable to SIM swap fraud and a risk that ordering a SIM first, then providing the PAC to the new company doesn’t work or can’t be done and I lose my number anyway although some people are recommending this route.
..................................

Where exactly did you get that from? O2, nor any provider have the right to stop your number immediately because you requested a PAC !!
One thing you should do, is wait until you get your new sim from your new provider, check it works, coverage ok etc. THEN PAC you number to it.

Moonwolf said:

...............
While I have moved security to authenticator apps or passkeys where supported, there are still enough that I can’t change because they don’t support other than texts, and I have had the same number for over two decades so obviously I want to keep my number. .............

Don't like Authenticator Apps for the simple reason they contain the fact that your have a particular account. With a Text at least you can delete that after the verification and no-one is any the wiser that you have a particular account if they get your phone.

flaneurs_lobster

Phones4Chris said:

Don't like Authenticator Apps for the simple reason they contain the fact that your have a particular account. With a Text at least you can delete that after the verification and no-one is any the wiser that you have a particular account if they get your phone.

Authenticator Apps (at least the ones I use) have biometric protection before you can see any details or use them.

flaneurs_lobster

Phones4Chris said:

Moonwolf said:

...............

Clearly I should request a PAC but reading on here it looks like there is a risk O2 will stop my number immediately, a risk that there are problems with set-up, a risk that a new SIM is intercepted and I become vulnerable to SIM swap fraud and a risk that ordering a SIM first, then providing the PAC to the new company doesn’t work or can’t be done and I lose my number anyway although some people are recommending this route.
..................................

Where exactly did you get that from? O2, nor any provider have the right to stop your number immediately because you requested a PAC !!
One thing you should do, is wait until you get your new sim from your new provider, check it works, coverage ok etc. THEN PAC you number to it.

Probably doesn't apply to us tech-savvy hipsters but there are a couple of posts on here from people who have had their O2 service nixed when they were looking to move the number elsewhere.

I'm thinking that Mr Lewis's "campaign" has resulted in a lot of outrage and righteous ringing up of O2 by people who may not quite know their Cancels from their PACs and O2 CS are not being too fussy about saying "Are you sure?"  

And that's before any layers of complication are added when considering phone+airtime contracts which may or may not involve a third-party reseller.

Moonwolf

flaneurs_lobster said:

Phones4Chris said:

Don't like Authenticator Apps for the simple reason they contain the fact that your have a particular account. With a Text at least you can delete that after the verification and no-one is any the wiser that you have a particular account if they get your phone.

Authenticator Apps (at least the ones I use) have biometric protection before you can see any details or use them.

Yes, and at least on the iPhone you can press and hold down the app icon and choose “Require Face Id” to force it if it isn’t built in.

With the default configuration on many phones it is possible to read texts from the lock screen so theft of a locked phone can make you vulnerable. With require face id even the theft of an unlocked phone they cannot access the authenticator app unless they have your PIN or apple id password.

flaneurs_lobster

Moonwolf said:

With the default configuration on many phones it is possible to read texts from the lock screen so theft of a locked phone can make you vulnerable.

Good point.

Turning that off should be on everyone's checklist for securing your device. 

glennevis

flaneurs_lobster said:

crumpet_man said:

Not an answer to your question exactly but I am in a similar situation and am looking to get a new PAYG (one which requires very little chargeable activity to stay active, £10 will last years) and manually update anything important (banks etc) to the new PAYG number.

Then, when I port my day to day number I do not have the additional worry of not being able to access my accounts and it also keeps the accounts related phone number completely separate to my normal number which in my mind is more secure way of doing things.

Now all of this sounds eminently sensible, decent belt'n'braces plan.

The bit that you might find hard is the £10 forever PAYG, there are however always cheap PAYM deals available.

Giffgaff PAYG fits the bill.

Activate your SIM at the start with £10 airtime credit and make sure you send a text message at least once every 6 months to keep it alive.

flaneurs_lobster

Moonwolf said:

flaneurs_lobster said:

Phones4Chris said:

Don't like Authenticator Apps for the simple reason they contain the fact that your have a particular account. With a Text at least you can delete that after the verification and no-one is any the wiser that you have a particular account if they get your phone.

Authenticator Apps (at least the ones I use) have biometric protection before you can see any details or use them.

Yes, and at least on the iPhone you can press and hold down the app icon and choose “Require Face Id” to force it if it isn’t built in.

That would be an excellent feature for Android to copy, notoriously the Gmail app for one cannot be protected unless you use third-party software.

dcman

Anyone porting their number to any other mobile network shoudl read the SPUSU-EXCEPTIONAALY DANGEROUS RISK - item as the riks highlighted there is VERY real from all the networks