Mobile phone scams are on the rise across the UK, and one of the most dangerous is the O2 SIM swap scam. I have personally seen an influx of calls from these scammers recently, so I can tell you first-hand how they operate and how to handle them.
Overview
Fraudsters impersonate O2 staff and claim they have noticed that your SIM card is performing poorly after complaints from other customers. They then ask for details so they can send you a replacement SIM urgently.
There are variations of this scam, and other network providers are also being targeted. In my case, the tactic appears to be a call every week from a different number each time.
This scam can have serious consequences if you are not aware of the tactics, including account takeover, financial loss and identity theft. The key point is that this is not just a nuisance call. It is a real cyber security threat.
What is the O2 SIM swap scam?
In an O2 SIM swap scam, criminals contact victims by phone and pretend to be from O2 customer support. They often claim there is a security issue, suspicious activity or a problem with your SIM card.
The attacker's goal is to gather enough information to take control of your mobile number. Once they succeed, they can intercept text messages and reset passwords for email, banking and other online services, including MFA requests.
How the scam works
- 1. You receive an unexpected call claiming to be from O2.
- 2. The caller says a new SIM card is being issued for security reasons or because they have noticed a problem with yours.
- 3. They ask for personal details such as your email address, date of birth or verification codes.
- 4. The attacker uses this information to request a SIM swap from the network provider.
- 5. Your phone loses signal while the criminal gains access to your accounts.
- 6. This particular case uses O2 as an example, but other network providers are also targeted.
This method is increasingly used in cyber crime because mobile numbers are linked to many online services.
Warning signs of a fake O2 call
- • Unsolicited calls claiming to be from O2.
- • Urgent language or pressure to act quickly.
- • Requests for personal or security information.
- • Caller ID that appears to be O2 but cannot be verified.
- • Unexpected SIM replacement messages or emails.
How to protect yourself
- • Never share personal details during unsolicited calls.
- • Hang up and contact O2 using the official phone number.
- • Enable multi-factor authentication (MFA) on email and banking accounts.
- • Use strong, unique passwords for every service.
- • Add extra security checks with your mobile provider.
- • Monitor your phone signal and account activity regularly.
These steps significantly reduce the likelihood of account takeover.
What to do if you receive a suspicious O2 call
- • End the call immediately.
- • Contact O2 directly through official support channels.
- • Change your passwords as soon as possible.
- • Check your bank and online accounts for unusual activity.
- • Report the incident to Action Fraud in the UK.
Early action can prevent serious financial and data loss.
Why SIM swap scams are a serious cyber security threat
SIM swap fraud is no longer just a personal risk. It is a growing threat to businesses. Attackers can use stolen mobile numbers to bypass security controls, access Microsoft 365 accounts and infiltrate corporate systems.
For SMEs and remote workers, protecting mobile authentication is now a critical part of cyber security strategy.
Need help protecting your business?
If you are concerned about mobile security or SIM swap risks, professional cyber security advice can help you strengthen your defences. Max Cybersecurity helps UK businesses protect their systems, data and users from modern cyber threats.
