PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your carrier account shows an unexpected eSIM, number transfer, port-out, or security change

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Contact your carrier immediately through an official route you find independently and say that you did not authorize the change. Ask the carrier to stop any pending activity, restore control of your number, and secure the account.

Do not do these things

  • Do not approve an eSIM activation, number transfer, port-out, password reset, or security prompt you did not start.
  • Do not share verification codes, passwords, account PINs, transfer PINs, or personal information with someone who contacts you unexpectedly.
  • Do not call a number or open a link contained in an unexpected alert unless you independently confirm it belongs to the carrier.
  • Do not assume a sudden loss of calls, texts, or data is only a coverage or device problem before the carrier checks the account.
  • Do not delete account alerts, emails, or messages before saving the relevant details.
  • Do not factory-reset, erase, trade in, or replace the phone as your first response.
  • Do not send money or move funds because someone claims this is necessary to protect them.
  • Avoid relying on text-message security codes for sensitive account recovery until the carrier confirms that you control the number.

What to do now

  1. Contact the carrier using its official app, a website address you already know, the number on a recent bill, or an official retail store. Use another phone or a secure internet connection if your service has stopped.
  2. Tell the carrier exactly what appeared on the account and that you did not authorize it. Ask the carrier to check for pending and completed eSIM activations, SIM changes, number transfers, port-out requests, new devices, authorized-user changes, and security-setting changes.
  3. Ask whether the carrier can stop or reverse the unauthorized activity, disconnect any unrecognized eSIM or device, and restore your number to your device. Request a fraud case or reference number.
  4. Ask what account protections are available against further SIM changes, number transfers, port-outs, or account changes. Follow the carrier’s verified process to add any suitable restriction or lock.
  5. Reset the carrier account password and any account PIN, passcode, or transfer PIN the carrier says may be affected. Check the recovery email, contact details, authorized users, devices, and billing information, and report anything unfamiliar.
  6. Secure your main email account from a trusted device. Use a new, unique password, check recovery details and recent sessions, and sign out devices you do not recognize.
  7. Check banking, payment, investment, cloud storage, social media, and other important accounts for unfamiliar logins, password resets, changed recovery details, purchases, withdrawals, or transfers. Contact the affected provider through an official route if you find activity you did not authorize.
  8. Where an account offers a choice, consider changing text-message verification to an authenticator app, passkey, or security key after confirming that the replacement method works.
  9. Save screenshots or copies of the carrier alert, account changes, service-loss time, messages, case numbers, and relevant account activity. Record when you contacted each organization and what action it took.
  10. If someone appears to be using your personal information, use IdentityTheft.gov for situation-specific recovery steps. Report suspected fraud to the Federal Trade Commission, and consider an FCC phone complaint if the carrier does not resolve the service or number-porting issue.

What can wait

You do not need to decide now whether to change your phone number, replace the device, switch carriers, or close every online account. A factory reset, full credit review, credit freeze, police report, or detailed complaint can usually wait until you have contacted the carrier and secured your number, email, and any account showing unauthorized activity.

Important reassurance

An unexpected carrier change does not mean that every account has been accessed. Focus first on restoring control of the number, securing your email, and checking accounts that hold money or sensitive information.

Scope note

This guide covers immediate first steps only. Later recovery may require help from your carrier, affected account providers, financial institutions, identity-theft services, law enforcement, or a qualified cybersecurity professional.

Important note

This is general information, not legal, financial, cybersecurity, or other professional advice. Carrier procedures and available security controls vary, so confirm the current process through the carrier’s official channels.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us