Phone number security

[msgibson]

A friend had her phone number stolen and ported to a new provider without her permission. I texted her yesterday because I was unaware this had happened to her and now I am concerned they will steal my phone number too. How do I get Public Mobile to not port my number if there is a request?  How can I protect myself from this happening to me?  I have had my number for so many years there would be so many problems if someone stole it. 

[geopublic]

---

@msgibson wrote:

A friend had her phone number stolen and ported to a new provider without her permission. I texted her yesterday because I was unaware this had happened to her and now I am concerned they will steal my phone number too. How do I get Public Mobile to not port my number if there is a request?  How can I protect myself from this happening to me?  I have had my number for so many years there would be so many problems if someone stole it. 

---

@msgibson  Unless your texted your friend your passwords or your account information no need to worry. Sim jackers are more interested in getting access to your friend's bank account and other online accounts rather than harvesting texts from the compromised number.

Practice good online hygiene, protect your online passwords  (selfserve, email, online banking etc.) use Authenticator apps instead of your phone number for 2FA when available and for the most part you will be ok. 🙂

[gpixel]

@msgibson one of the best things you can do is remove the 2 step verification method. that's how these fraudsters are getting into your emails, PayPal and banks so easily and that's why they sim jack your number cause they know they can impersonate you.

[brettster99]

@Naepalm 

Yeah I have 2 emails one that’s really ummm “nonsense” and the other using my name (for emailing employer when I had jobs etc) I did change my account name to a different name to protect my account even future thanks to the suggestions on a previous thread about this topic 

[brettster99]

@Naepalm 

Some excellent suggestions that could be applied to really any sensitive information like bank accounts etc.

I do some of the things like my FB has a different login compared to my IG. And my bank is different from my email (both emails are like at least 50 characters Laughing out loud) which is also different from PM

[Naepalm]

@brettster99 that's right, and if your phone doesn't have a password then they can find your name pretty quickly by going through your contacts etc. Or even your email. Many of us use our name as our email. 

[Naepalm]

---

@msgibson wrote:

A friend had her phone number stolen and ported to a new provider without her permission. I texted her yesterday because I was unaware this had happened to her and now I am concerned they will steal my phone number too. How do I get Public Mobile to not port my number if there is a request?  How can I protect myself from this happening to me?  I have had my number for so many years there would be so many problems if someone stole it. 

---

Im doing a youtube video on SIM jacking next week 🙂

You need to protect your passwords. Go into your self serve account and change your profile name from your actual name. When someone ports your number they need your name and your account number, they get your account number when your password has been compromised or if you posted this information online. They can also port your number if they have your name and your PIN# or name and your IME#. 

They usually gather these things by phishing, where you have given this information by accident to a fraudulent source. 

Start by making sure your passwords are protected and difficult to figure out. You can use a physical authentication key where sites use them like Yubikey. Always use two-factor authentication for any site that has it, and if the two factor uses a phone number never use your own phone number using a spouse or a close friend, it's annoying to call them when you need it, and only call them do not text these numbers back and forth. 

Lastly, protect your passwords by using a password protection app that has high levels of encryption like LastPass.

Stay safe out there keep your self protected! 

[brettster99]

@will13am 

That really only works if the IMEI is not exposed on the outside of the phone. Which really means if the phone is stolen (which in this case it’s not so no worries there) they have the IMEI number so don’t need account number. So what’s left is the name on account 

[brettster99]

@msgibson 

Well just having your phone number it would be hard to port (though not impossible if you shared other details on social media) 

Like what @Dunkman  and @gblackma have said to keep your account secure. Also if there is an attempt to port they send a message to the number. If that happens immediately login in and suspend service.

Not much else you can do

[kselmak]

@msgibson 

If you go to your account and start porting another cell phone number you will get the form that needs to be filled in with the correct information for port to be successful 

Make sure that people can't have/guess that info.

I misspelled my name certain way.

Keep you password private and strong enough, if they make it into your selfserve they're is nothing you can do. Have email alias or alternative email so that it's not easy to guess if they know your common and well known email

[will13am]

@msgibson , securing your personal information is the only real solution here.  That starts with using a strong password for the self serve account prevent unauthorized access.  Porting requires name and account number or IMEI.  One strategy is to use a fake name as suggested.  Also, your phone should be secured with a strong PIN/password so that IMEI is not easily exposed.  Of course avoid installing questionable apps that could read phone information.   

[Dunkman]

@msgibson 

Sim jacking is becoming more common unfortunately.  

The best way is to protect your account information.  Specifically, your account number of PM. Need a strong password for both PM account and email address associated with account.  One trick is to change your account holder name in your self service account.  

Here is PM response:

https://www.publicmobile.ca/en/bc/get-help/articles/port-fraud-protection

Hopefully, PM and other telecom companies will increase security soon. 

[gblackma]

@msgibson change your name on your self service account.  It can be anything ie Luke Skywalker. This is currently the best way to prevent fraudelent porting here. 

Officially they are still working on it. And currently this is their protection 

https://www.publicmobile.ca/en/on/get-help/articles/port-fraud-protection

If you ever get the message immediately put your phone on Lost/ stolen in your self service account

And come here and contact the moderators. Stay safe.