Anyway to lock phone number with service provider (Public)?

[cantwait]

I recently read this article about SIM Swapping and ways to defend against it.

#2 on this list was calling into your service provider and locking (or freezing) your number so it cannot be ported to another carrier unless the lock is lifted by way of a PIN or walking into a store.

Not sure if this is possible with Public, but I'd be interested to look into doing this.

Source:

https://www.androidpolice.com/how-to-protect-yourself-from-a-sim-swap-attack/

[BKNS27]

@cantwait 

There a likely chance of SIM swapping when hackers talk to a live agent and convince them that they are the person they claim to be.

There is less a likely chance on PM because everything related to phishing “I forgot my email, password and PIN” post are directed to a CS_Agent online to confirm their credentials.

PM has a few safeguards but there are a very slim chance of SIM swapping on PM.

On bullet 5 is why CS_Agent put a post on Announcements.

https://productioncommunity.publicmobile.ca/t5/Announcements/Important-Reminder-for-Our-Community-Me... 

Then we have members post their personal information on this Community Forum…asking to be SIM swapped or playing a prank.

[BEER]

Here are some ways to defend against SIM swapping:

1. Use Two-Factor Authentication (2FA): One of the most effective ways to defend against SIM swapping is to use two-factor authentication (2FA) for your online accounts. With 2FA, even if an attacker gains access to your phone number, they still need a second factor (such as a password or biometric data) to access your account.

2. Use Strong Passwords: Make sure to use strong, unique passwords for your online accounts. Avoid using the same password across multiple accounts.

3. Enable PIN or Password Protection: Most mobile carriers offer the option to add a PIN or password to your account. This can help prevent unauthorized SIM swaps, as the attacker would need to know the PIN or password to make any changes to your account.

4. Monitor Your Accounts: Regularly monitor your online accounts for any unusual activity. If you notice any unauthorized access or changes, contact your service provider immediately.

5. Use a Virtual Private Network (VPN): A VPN can help protect your online activity and prevent attackers from intercepting your data.

6. Be Careful with Personal Information: Avoid sharing sensitive personal information online or over the phone, as this can be used to impersonate you and carry out SIM swapping attacks.

7. Be Wary of Unsolicited Messages: Be suspicious of unsolicited messages, especially those that request personal information or ask you to click on a link. These could be phishing attempts designed to steal your information.

[dust2dust]

Then put fake information in your account to make it much harder for that social engineering to happen.

Don't put real information out in the wild.

There's the initial login 2FA option which will allow a sim change. If you turn that off then when a sim change is asked for then it will do a 2FA at that time.

[Handy1]

@cantwait  Also has @softech  mentioned the culprit would need your SIM card to receive such a text to confirm the port so by also keeping lock code on your phone you should be worry free 

adding 2FA will ensure no one gets your PIN code also or be able to change it on you 

[softech]

@cantwait yes, the 2FA is a protection for account login.  The port authentication text i mentioned above is a protection against sim fraud (porting)

[cantwait]

Already got 2FA on! 👍 Thing is, 2FA doesn't protect you from SIM Swapping which is just basic low-level social engineering -- and becoming increasingly more common.

[Dunkman]

@cantwait 

Public mobile does not offer this type of service.  

However, to offer some protection, if a customer does do a Sim card change, it requires a two factor authorization either via text or email.  

https://www.publicmobile.ca/en/ab/get-help/articles/sim-swap-fraud

[softech]

@cantwait there is no action needed or you can do to lock the number to PM.  However, PM does have security in place

if you (or anyone) ever want to port your number out,  PM will send you a text to your phone and you need to reply YES within 90 min

[Handy1]

@cantwait  Go to self serve profile tab and ensure you 2FA authentication is enabled should keep you safe from such and issue 

My account

Legend  and features

Change plan / update cc /auto pay

Account #/ change # port /swap SIM