2 min read
Definition
In a SIM swap, the fraudster persuades your mobile provider to move your number to a SIM they control, then intercepts any codes or resets sent by text. It's a key reason SMS is the weakest form of 2FA.
Why it matters for your business
Using an authenticator app or a passkey instead of SMS codes defeats it, because those don't depend on your phone number. Watch for a sudden loss of mobile signal as a warning sign.
Related reading

Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Authenticator app
An authenticator app generates a fresh six-digit code every 30 seconds on your phone, used as the second…
Read →
Passkey
A passkey signs you in using your device's own unlock (fingerprint, face or PIN) instead of a typed password,…
Read →
Account takeover
Account takeover is when a criminal gains control of your account using stolen, guessed or phished…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.