FBI figures put SIM swapping losses at almost $26 million in a recent reporting year, with an average above $26,000 per victim. Separate reporting describes a 240% surge in cases, around 90% of which occurred without any victim interaction.
That Last Figure Changes The Advice
Consumer guidance on account takeover is built on the assumption that the victim does something: clicks a link, answers a call, enters a credential. Awareness training is the standard response.
If most SIM swaps involve no victim interaction, the victim had no opportunity to behave differently. The failure occurred entirely at the carrier — a person or process transferred a number to somebody who was not the subscriber.
It Is The Help-Desk Problem In A Different Industry
This is the same mechanism this desk has filed all year: at M&S in 26-0413, at PowerSchool in 26-0113, and — on the attackers’ own account, which the company has not confirmed — at Abbott in 26-0714. Someone with authority to restore access was persuaded to grant it to the wrong person.
Carriers face the additional difficulty that legitimate number porting is a regulated consumer right which they are obliged to make straightforward. The friction that would stop fraud is friction a regulator has required them to remove.
The Loss Figures Understate It
Reported losses capture direct theft. They do not capture the accounts reached afterwards using the number as a recovery channel — the property filed at 26-0212 and 26-0205.
A successful swap is rarely the objective. It is the step that makes everything else possible, and the downstream losses are recorded, if at all, as separate incidents with different causes.
This is an analysis file built on published figures, listed below. Reported losses come from complaint data and understate incidence; the interaction percentage is from a single source and is labelled as such. Corrections: corrections@forensicpost.com.