How to Fight Mobile Number Port-out Scams
Summary: T-Mobile, AT&T and other major U.S. carriers are alerting customers to a rise in fraudulent port-out requests, where thieves who already hold a stolen account password port a victim's number to a new provider to intercept one-time codes sent by text or automated call. AT&T's Brian Rexroad said thieves sometimes present a fake ID and the victim's personal information at an AT&T store to switch carriers, and T-Mobile is directing customers to add a 6-to-15-digit port validation passcode by calling 611.
Key Takeaway: The attack depends on static identifiers - name, date of birth, Social Security number - that thieves already hold, and the last four digits of your SSN are the default PIN at some carriers, so the second factor protecting your bank and email can be moved to a device you do not control.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026