Increase in SIM Swapping Attacks – Are eSIMs Secure?

The telecommunications sector is facing an unprecedented crisis as SIM swapping attacks are increasing at alarming levels, with the UK alone reporting a staggering 1,055% increase in incidents in 2024 (from just 289 cases in 2023 to almost 3,000).

This explosive increase in fraud has prompted urgent calls for enhanced security measures , with eSIM technology emerging as a promising solution to address the threat.

As cybercriminals increasingly target vulnerabilities inherent in traditional SIM card systems, eSIM technology offers advanced security features that could significantly reduce the success rate of these sophisticated attacks.

See also: AT&T: Wireless Lock is released to prevent SIM swapping attacks

Understanding SIM Swapping Attacks

SIM swapping, also known as SIM hijacking, represents a sophisticated form of identity theft, where attackers manipulate mobile phone providers to transfer a victim's phone number to a SIM card they control.

The attack methodology follows a predictable pattern: cybercriminals first collect personal information about their targets through data breaches, social media research, or phishing campaigns.

Armed with details such as names, addresses, dates of birth and account security questions, the attackers then contact the victim's mobile provider, posing as the legitimate customer and requesting a SIM transfer due to a "lost" or "damaged" device.

The effectiveness of the attack stems from the exploitation of SMS-based two-factor authentication (2FA) systems that many organizations still use for security verification.

Once attackers have control of a victim's phone number, they can steal verification codes sent via SMS, which allows them to reset passwords and gain unauthorized access to bank accounts, cryptocurrency wallets, email services, and social media platforms.

A Princeton University study revealed that 80% of early SIM swapping fraud attempts were successful at major U.S. carriers, highlighting widespread vulnerabilities in current authentication processes .

See also: Phishing campaign targets hoteliers through malicious ads

Explosive Rise of SIM Swapping Threats

The scale of SIM swapping attacks has reached crisis levels worldwide, with many indicators showing an accelerating trend. The FBI investigated 1,075 SIM swap attacks in 2023, with losses approaching $50 million.

In 2024, IDCARE reported a 240% increase in SIM swap cases, with 90% of incidents occurring without any victim interaction. The economic impact extends beyond individual losses, as evidenced by T-Mobile for a SIM swap attack in 2020.

Many factors contribute to this dramatic increase in SIM swapping fraud. The widespread reliance on SMS-based 2FA creates a huge ROI for criminals, as a successful transfer provides access to the entire digital financial life.

At the same time, data breaches have provided attackers with over 7 billion credentials on dark web marketplaces (as of 2024), providing the personal information necessary to bypass provider authentication. The cryptocurrency market has created attractive high-value targets, with individual attacks capable of generating huge profits.

Additionally, cost-cutting measures by telecom companies have introduced new vulnerabilities. Global carriers have reduced customer support functions, and agents facing response time pressure are statistically more susceptible to “authentication bypass fatigue.”

See also: Scattered Spider: When Browsers Become an Attack Surface

social engineering tools AI-based now allow attackers to create convincing voice impersonations and GPT-written call scripts that defeat legacy knowledge-based verification systems.

eSIM technology and how it enhances security in case of SIM swapping

eSIM technology represents a fundamental change in the architecture of mobile phone connectivity, moving from removable physical cards to a more secure and flexible solution.

• The technology addresses the fundamental vulnerabilities that enable traditional SIM swapping attacks, introducing several critical security enhancements. The most significant protection comes from eliminating physical access risks. Unlike removable SIM cards that can be extracted and moved between devices, eSIMs are permanently embedded in the device hardware, making physical theft nearly impossible without sophisticated engineering tools. This embedded nature immediately eliminates the easiest method of SIM tampering.

• The digital activation process for eSIM profiles requires multi-layered authentication that is significantly stronger than traditional carrier verification processes.

• eSIM activation typically involves scanning QR codes or using secure in-app procedures, which must be verified directly on the target device.

• This digital provisioning process, governed by GSMA security standards, adds multiple layers of verification that make unauthorized transfers extremely difficult compared to social engineering tactics used against call center agents.

• Advanced are encryption protocols another critical defense mechanism in eSIM technology. eSIMs use end-to-end encryption to store and transmit all data, making it significantly more difficult to intercept than traditional SIM cards. Cryptographic keys inserted during manufacturing create secure authentication chains that cannot be easily copied or tampered with. In addition, eSIM profiles cannot be cloned or copied, eliminating a major attack vector affecting physical SIM cards.

• Remote management capabilities provide enhanced security control for both users and providers. If a device is lost or stolen, eSIM profiles can be instantly disabled remotely, cutting off the device’s connection to the network and preventing unauthorized use.

• Many eSIM implementations require biometric verification, device PINs, or other security measures that are directly tied to the physical device, making it much more difficult for remote attackers to manipulate carrier representatives to transfer services.

See also: AI Waifu RAT targets users with new social engineering techniques

Despite its significant security advantages, eSIM technology faces several limitations that must be recognized in comprehensive security strategies. Social engineering remain a persistent threat, as eSIM activation can still be manipulated through sophisticated impersonation attacks targeting carrier customer service systems. While eSIM activation processes are more secure than traditional ones, determined attackers with sufficient personal information about victims may be able to convince carriers to provide new eSIM profiles.