If your phone suddenly shows no signal, you can’t receive text codes, or you’re locked out of accounts, someone may have hijacked your number. That attack is called a SIM swap, and it is far more common than a true “cloned phone.” This guide covers the warning signs, how to check, and what to do in the first hour.
Is a “cloned phone” a real thing?
Mostly, what people call a cloned phone is one of two problems: someone took over your phone number, or someone got into one of your accounts. Malwarebytes describes SIM swapping as a scam where criminals convince a carrier to move your number to a SIM they control. Once they have it, texted verification codes and password resets go to them, not you.
Warning signs of a SIM swap
Malwarebytes lists these signs:
- your phone suddenly shows no signal or loses service for no clear reason;
- you’re locked out of accounts and can’t receive text-based security codes;
- bank withdrawals or password reset messages show up that you didn’t request;
- your carrier confirms your number was activated on a different SIM or device.
If you also see messages you didn’t send in your chat apps, or contacts say they got odd requests from you, treat that as a second alarm.
How to check right now
- Look at your signal. If you have “No service” in a place where you normally have coverage, go to the next step.
- Contact your carrier through a known support channel, ideally from another phone, and ask directly whether a SIM swap, eSIM change, or port-out was processed on your line.
- Check your accounts. Look at your email, bank, and payment apps for password resets or transactions you don’t recognize.
- Check WhatsApp’s linked devices. Open WhatsApp, go to Settings, then Linked Devices. Anyone with access to your phone can link another device by scanning a QR code, and this list is where that shows up. Disconnect anything you don’t recognize, and make it a habit to check the list regularly.
What to do if your number was hijacked
Malwarebytes recommends this order:
- Call your carrier immediately and ask them to reverse the SIM transfer. Have your ID ready.
- Change your passwords, starting with email, banking, and social media.
- Replace SMS-based two-factor authentication with an authenticator app wherever you can.
- Watch your bank, payment apps, and credit accounts for suspicious activity.
Once service is back, ask your carrier to add a stronger account PIN and port-out protection.
If an account was hacked
The FTC’s guide for hacked accounts says to follow the provider’s own recovery instructions first, then secure the account once you’re back in. That means:
- change the password to a strong one;
- sign out of all devices;
- turn on two-factor authentication;
- check that the recovery email addresses and phone numbers are yours.
Then look for signs of misuse, such as forwarding rules you didn’t create in your email, messages you didn’t send, or new friends you don’t recognize on social media. Finally, tell your contacts so they ignore requests for money or links sent in your name. For WhatsApp, our guide on turning on two-step verification walks through the PIN setup that helps stop account takeovers, and a recent chat backup helps you restore conversations afterward.
How to prevent it
- Set a strong, unique PIN or password on your carrier account, and avoid obvious choices like your birth year or simple number patterns.
- Turn on any SIM lock or account freeze your carrier offers.
- Use an authenticator app, such as Authy or Google Authenticator, instead of text codes. These apps don’t depend on your phone number.
- Consider a physical security key for the accounts that matter most.
- Limit the personal information you share online, avoid unknown links, and be wary of unsolicited messages asking for account details.
FAQ
Is there a code I can dial to see if my phone is cloned?
No. Codes that circulate online, like *#21# or ##002#, only check or cancel call forwarding. They don’t show whether a phone was cloned.
What’s the difference between a carrier PIN and a SIM PIN?
A carrier account PIN is asked for when someone contacts your carrier to change important things, such as replacing your SIM or transferring your number. A SIM PIN only locks the SIM in your phone so it can’t be used in another device, and it doesn’t stop a scammer from convincing your carrier to move your number.
Should I turn off text-message codes?
Where an authenticator app is available, switch to it. Malwarebytes recommends this because apps don’t rely on your phone number.
What should I do first if I lose signal suddenly?
Call your carrier from another phone using a known support number and ask if your SIM or eSIM was changed. Then start changing passwords, beginning with email and banking.
