Got SIM-swapped after fake carrier call – lost all crypto

I’m posting this as a warning as a result of I still can’t consider how real this felt.

I acquired an SMS that appeared prefer it was from my cellular service, saying a brand new SIM/eSIM was about to be activated and to name a quantity if it wasn’t me. I referred to as, followed the menu, and spoke to somebody who sounded skilled and calm.

They informed me someone had tried to activate a brand new SIM on my account and that they wanted to “secure” my line. I was guided to an internet site that seemed precisely like my service’s website and requested to confirm with BankID. The web page stated “verification”, nothing about signing something.

After the call, my telephone misplaced signal. A few hours later I regained access and realized what had occurred. My e-mail had been taken over by way of my telephone number, and from there my crypto change accounts have been accessed. As a result of my browser was synced, additionally they obtained saved passwords. All my crypto was drained.

My service later confirmed that a new eSIM had been ordered in my identify.

I know individuals will say “how might you fall for this”, however every little thing seemed respectable and there was no strain or obvious purple flags at the time.

Please don’t trust security SMS or calls. By no means authenticate something from a link or number you didn’t provoke yourself. Should you get a message like this, contact your service by means of their official app or website solely.

I hope this helps someone keep away from the same mistake.