topic Re: SIM HACKED in Get Support

SIM HACKED

channinglaine14 — Wed, 05 Jan 2022 20:47:40 GMT

Hello all. Found out my SIM card was hacked into, and therefore my paypal etc have unauthorized transactions. I'd never heard of this before. Anyways, I got a new SIM card and also changed my number. Wondering if there are any other steps I need to take and how to avoid this bs in the future. Thank you

Re: SIM HACKED

Anonymous — Sat, 05 Sep 2020 20:04:07 GMT

wrote:
Hello all. Found out my SIM card was hacked into, and therefore my paypal etc have unauthorized transactions. I'd never heard of this before. Anyways, I got a new SIM card and also changed my number. Wondering if there are any other steps I need to take and how to avoid this bs in the future. Thank you

Sucks.

Step 1: Is your name as shown in your username? Maybe stop creating usernames using anything real. Anywhere.

Re: SIM HACKED

geopublic — Sat, 05 Sep 2020 20:07:34 GMT

@channinglaine14 If you have unauthorized PP transactions I would start by securing your PP password and using an authenticator app for 2FA. How do you know your sim was hacked? Did your phone stop working?

Re: SIM HACKED

gpixel — Sat, 05 Sep 2020 20:41:24 GMT

@channinglaine14

there was a data breach(Koodo) back in February that released accounts and phone numbers and possibly passwords this also includes Telus and public mobile

call your bank and let them know what happene

call Equifax to restrict any accounts from being made

change all your passwords. keep your public mobile password different than your email etc.

change your 2fa phone number to something other than your personal phone number.

go to haveibeenpwned.com to see the websites with data breaches tied to that email

Re: SIM HACKED

will13am — Sat, 05 Sep 2020 20:14:44 GMT

@channinglaine14 , the first thing you need to do if you have not done so already is to secure your self serve account. Change the password to a strong password. Technically it is your self serve account that was hacked, not the SIM card. The hacker replaced your SIM card with one in their possession which allowed them to use your phone number. As for next steps, make sure that all accounts using 2 factor authentication are secured with a new passwords that are different from the one you use in the self serve account. Contact all service providers to make sure that there are no unauthorized transactions.

Re: SIM HACKED

channinglaine14 — Sat, 05 Sep 2020 20:17:55 GMT

This is the only place I have this username, and no it's not my name that I use on any platform. Thanks though.

Re: SIM HACKED

channinglaine14 — Sat, 05 Sep 2020 20:19:26 GMT

My Paypal and online banking have all been locked until I can figure this out. It was hacked because my phone stopped working and they've used my number to get into my Paypal and make unauthorized purchases.

Re: SIM HACKED

LurganIeUk — Sat, 05 Sep 2020 20:26:45 GMT

@channinglaine14 wrote:
Hello all. Found out my SIM card was hacked into, and therefore my paypal etc have unauthorized transactions. I'd never heard of this before. Anyways, I got a new SIM card and also changed my number. Wondering if there are any other steps I need to take and how to avoid this bs in the future. Thank you

Did you use your phone number to log into PayPal? I never use my phone number for logins or for 2 factor. I do have 2 factor though.

Re: SIM HACKED

kb_mv — Sat, 05 Sep 2020 20:49:12 GMT

@channinglaine14 NEVER EVER use your phone number as 2FA or forgotten password retrieval method. NEVER. If you have used it on any other accounts, change it. Use an authenticator app (which PayPal supports). That way people can have your phone number all they want, it won't do them any good as they cannot get into any of your accounts. Here is a reply I gave to another thread about this, you may find it worth a read:

https://productioncommunity.publicmobile.ca/t5/Using-Your-Service/pretty-sure-i-got-hacked/m-p/58507...

Re: SIM HACKED

geopublic — Sat, 05 Sep 2020 21:25:57 GMT

@channinglaine14 In most cases the first thing that gets hacked is one's email. If you keep emails with username password Information game over. If the hacker gets ahold of your PM account or PIN info then they can port out your number and then the nightmare begins. You should secure your email account and try to get back your number ASAP.

Re: SIM HACKED

jor123 — Sun, 06 Sep 2020 13:47:05 GMT

Pm should really have a mechanism to "lock" accounts from being ported out without authorization. This has come up time and time again with no change to my knowledge?

Re: SIM HACKED

channinglaine14 — Wed, 09 Sep 2020 21:56:15 GMT

TOTALLY agree.

Re: SIM HACKED

Luddite — Tue, 15 Sep 2020 17:16:05 GMT

@jor123 wrote:
Pm should really have a mechanism to "lock" accounts from being ported out without authorization. This has come up time and time again with no change to my knowledge?

@jor123 @geopublic SIM jacking does not require the number be ported out. With access to an account the SIM is replaced with another PM SIM used in the criminal's phone.

Re: SIM HACKED

geopublic — Tue, 15 Sep 2020 17:29:50 GMT

@Luddite wrote:
@jor123 wrote:
Pm should really have a mechanism to "lock" accounts from being ported out without authorization. This has come up time and time again with no change to my knowledge?
@jor123 @geopublic SIM jacking does not require the number be ported out. With access to an account the SIM is replaced with another PM SIM used in the criminal's phone.

@Luddite My understanding is that SIM Jacking is when someone takes over one's number by porting out the number to another provider. SIM swapping is when the the hacker/criminal takes over a number by switching the SIM card number on the same provider.

With many Banks, CC and online companies delaying 2FA via text for 48 hours many hackers/criminals have switched to the SIM swapping method as a result.

SIM swapping is also the preferred method for hackers/criminals when there is an internal breach or a known vulnerability with a provider's system.

Re: SIM HACKED

lucki — Tue, 01 Dec 2020 20:44:55 GMT

@will13am @channinglaine14 Unfortunately, Yesterday I just experienced the same bad thing as you. I have to by a new SIM card to make my phone work normally. My money was also stolen from Paypal.
Of course, change the password to a strong password is better.

Re: SIM HACKED

RosieR — Tue, 01 Dec 2020 21:05:10 GMT

@lucki wrote:
@will13am @channinglaine14 Unfortunately, Yesterday I just experienced the same bad thing as you. I have to by a new SIM card to make my phone work normally. My money was also stolen from Paypal.
Of course, change the password to a strong password is better.

Hi @lucki sorry to hear your phone got sim jacked too. Terrible thing this is. I'm just glad that you knew what to do. May I suggest that you also don't use your real name on your account.. use an alias like Alice Inwonderland or Kermit Dafrog etc.

Best wishes and season's greetings.

Re: SIM HACKED

Nezgar — Tue, 01 Dec 2020 21:16:51 GMT

@geopublic wrote:
@Luddite wrote:
@jor123 wrote:
Pm should really have a mechanism to "lock" accounts from being ported out without authorization. This has come up time and time again with no change to my knowledge?
@jor123 @geopublic SIM jacking does not require the number be ported out. With access to an account the SIM is replaced with another PM SIM used in the criminal's phone.
@Luddite My understanding is that SIM Jacking is when someone takes over one's number by porting out the number to another provider. SIM swapping is when the the hacker/criminal takes over a number by switching the SIM card number on the same provider.

With many Banks, CC and online companies delaying 2FA via text for 48 hours many hackers/criminals have switched to the SIM swapping method as a result.

SIM swapping is also the preferred method for hackers/criminals when there is an internal breach or a known vulnerability with a provider's system.

Sorry to be pedantic... but "SIM jacking" and "SIM swapping" are the same thing - the active SIM card is changed for the account. The service and phone number remain on the original account, but the service starts being provided on the faudster's SIM card.

"Port-out fraud" is when the phone number is ported-out to an entirely different carrier. The account at PM would normally be closed down. This now generates a confirmation text message to the the active SIM and requires a "YES" response within 90 minutes as of the last month or so.

Re: SIM HACKED

lucki — Tue, 01 Dec 2020 23:41:05 GMT

@RosieR I have changed the name from your suggestion, currently this is the only way to prevent the port-out phone number when the sim jacked. thank you.

Re: SIM HACKED

RosieR — Wed, 02 Dec 2020 23:08:40 GMT

@lucki wrote:
@RosieR I have changed the name from your suggestion, currently this is the only way to prevent the port-out phone number when the sim jacked. thank you.

@lucki you are very welcome. Have a happy holiday season 🎅🎄❄❄❄❄

Don't forget the get your PM More is Merrier is back: Free gifts for all!

Re: SIM HACKED

lucki — Thu, 03 Dec 2020 06:01:12 GMT

@RosieR thank you!