PanicStation.org
UK USA
uk Technology & digital loss

What to do if…
your carrier account shows an unexpected eSIM, number transfer, port-out, or security change

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Contact your mobile provider immediately through its official app, website, a recent bill, or another trusted route. Say that you did not authorise the change and ask it to secure the account, check whether a transfer is pending, and stop or reverse any unauthorised activity where possible.

Do not do these things

  • Do not share a PAC, eSIM activation code, account PIN, password, one-time code, or banking code that you did not request.
  • Do not call a number or open a link contained in the unexpected alert. Find the provider’s contact details independently.
  • Do not approve a notification simply to make repeated prompts stop.
  • Do not delete your existing eSIM, remove your physical SIM, or factory-reset your phone unless your provider confirms that this is necessary.
  • Do not transfer money to a so-called safe account or act on urgent financial instructions from an incoming caller.
  • Do not assume the account is safe because your phone still has service. A requested transfer may not have completed yet.

What to do now

  1. Contact your mobile provider through a verified route. Use its official app or website, contact details printed on a recent bill, or another phone if your service has stopped. Ask for the fraud or account-security team.

  2. State clearly what you did not authorise. Identify the unexpected eSIM, replacement SIM, PAC request, number transfer, port-out, password reset, PIN change, or security-detail change shown on the account.

  3. Ask the provider to contain the activity. Ask whether it can pause account changes, cancel a pending eSIM activation or transfer, restrict further porting activity, and restore control of your number. These options may depend on the provider and whether the change has already completed.

  4. Ask for a full account check. Request a review of recent eSIM activations, replacement SIMs, PAC requests, port requests, contact-detail changes, password or PIN resets, unfamiliar devices, and active sessions. Ask when each change was requested, whether it completed, and for a case reference.

  5. Secure the carrier account from a trusted device. Change the password to a new and unique one, replace the account PIN where available, remove unfamiliar recovery details or devices, and sign out other sessions. Use the provider’s official recovery process if you cannot sign in.

  6. Secure your main email account. Check its recovery email address, recovery number, forwarding rules, filters, recent logins, and connected devices. Change its password and sign out unfamiliar sessions. Use a passkey where available, or another verification method that does not depend on the affected mobile number.

  7. Contact your bank promptly when there may be financial risk. Use the bank’s official app or the contact details on your card or statement. Tell its fraud team that your mobile number may have been transferred or taken over, particularly if banking codes have stopped arriving, your details have changed, or you see an unfamiliar payment.

  8. Check other important accounts linked to the number. Start with password managers, payment services, messaging apps, cloud accounts, and social accounts. Look for password resets, new devices, changed recovery details, unfamiliar messages, or transactions, and use each service’s official recovery route.

  9. Keep a simple record. Save screenshots of the unexpected change, relevant emails or texts, the time service was lost or restored, actions taken, and case references. Do not include passwords, PINs, PACs, or one-time codes in anything you send.

  10. Report suspected fraud or unauthorised access. In England, Wales, or Northern Ireland, report cyber crime or fraud to Report Fraud. In Scotland, report it to Police Scotland online, by calling 101, or in person.

What can wait

You do not need to choose a new provider, buy a new phone, change your number, factory-reset the device, or decide whether to make a formal complaint unless your provider says an immediate change is necessary. Compensation requests, credit-file checks, and longer-term security improvements can wait until the mobile account, email account, and financial accounts are stable.

Important reassurance

An unexpected change is a warning that needs prompt checking, but it does not prove that every account linked to your number has been accessed. Work in order: contain the mobile account change, secure your main email, contact your bank where relevant, and then check other important accounts.

Scope note

This guide covers immediate first steps only. Recovering a number, investigating account access, disputing transactions, or pursuing a complaint may require later help from your mobile provider, bank, account providers, police, Ofcom, or another specialist service.

Important note

This is general information, not legal, financial, cybersecurity, or other professional advice. Mobile-provider procedures and available security controls vary, so follow instructions obtained through verified official channels.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us