ICICI Bank issues advisory on SIM-Swap fraud. Here’s how to prevent it

ICICI Bank has warned users of SIM-Swap fraud. In a Twitter post, the bank has advised: "never share your contact details publicly on any social media platform as it is sensitive personal information".

So what exactly is a SIM-Swap fraud for which the bank has issued an advisory?

According to the bank's website, under SIM swap/exchange, a fraudster manages to get a new SIM card issued for your registered mobile number through the mobile service provider. With the help of the new SIM card fraudster gets unique registration number or OTP (one-time password) and alerts required for doing financial transactions through your bank account.

To carry a SIM-Swap fraud, fraudsters first obtain your bank account details and mobile registration number. They get this through an attack known as phishing. For example, they can call you posing as the bank executive and get the account details. Many such details are also available on the dark web, where such data is sold for few rupees.

They can also install trojan or malware in your phone or computer by sending an email.

Once they get your registered mobile number and bank account details, they approach the SIM card issuer. Fraudsters can use any excuse to get the new SIM card like they have lost the mobile phone which had the SIM. Using forged documents, they obtain a new SIM from the cellular operator.

Once they obtain the new SIM card, the original one with the customer stops working. They use the new SIM card for unauthorised transactions.

Here are ways you can prevent SIM-Swap fraud

1. If your phone does not show any network connectivity, enquire with your mobile operator about the status of its service.

2. Don't share any personal or account details on the phone on an incoming call. Don't even verify details if the person already seems to have them.

3. Register for email and SMS alerts with your bank.

4. Keep a check on the transactions regularly.

5. Install a security app on your phone that can identify malware and trojans.

(Do you have personal finance queries? Send them to mintmoney@livemint.com and get them answered by industry experts)