Mobile money
SIM-Swap Fraud: How Attackers Drain M-Pesa and Mobile Money Wallets
Your phone number is the key to your M-Pesa, MTN MoMo or Airtel Money wallet — and to the SMS codes protecting your crypto accounts. In a SIM-swap attack, a criminal convinces the operator to move your number to their SIM, and your money follows. Here is how it happens and how to make it harder.
Last reviewed: 20 October 2026
How a SIM swap works
- 1The attacker gathers your personal details — full name, ID number, date of birth, recent transactions — from data leaks, social media or phishing.
- 2They visit an agent or call the operator, impersonate you and request a SIM replacement for your number, claiming a lost phone.
- 3Your SIM goes dead; their SIM now receives your calls and SMS, including one-time codes and mobile money notifications.
- 4They reset your mobile money PIN or app passwords and empty the wallet — sometimes within minutes, often at night or on weekends.
Unexplained total loss of network signal is the alarm bell. The moment your phone goes dead for no reason, assume a swap attempt and act immediately.
Why crypto users are targeted
Mobile money is the cash-out rail for most African crypto trades, so a successful swap can expose both your wallet balance and the proceeds of recent sales. SMS-based two-factor codes for exchanges also arrive on the same number. One successful swap can open several doors at once.
Reduce the risk before anything happens
- Use a strong, unique mobile money PIN that is not your birthday, ID digits or a repeated pattern — and never share it, including with anyone claiming to be from the operator.
- Ask your operator what extra verification it offers for SIM replacement — some allow you to set restrictions or require in-person verification with original ID.
- Switch exchange and email two-factor authentication from SMS to an authenticator app where the option exists.
- Keep the personal details that agents use to verify you off social media: ID numbers, full birth dates and transaction history.
- Do not announce large trades or cash-outs in public groups; attackers pick targets from what people reveal.
If your phone suddenly loses service
- 1Borrow a phone and call your operator's official customer-care line immediately. Ask whether a SIM replacement was requested for your number and block it if so.
- 2Contact your mobile money provider to freeze the wallet while you verify.
- 3Change the passwords of your email and exchange accounts, and sign out other sessions.
- 4Visit an operator shop with your original ID to restore your line through the official process.
- 5Check your mobile money and exchange histories for transactions you did not make, and report them through official dispute channels.
Speed decides the outcome. Attackers count on you waiting until morning. Operators and providers can only block what you report, and every hour of delay is time the number spends in the wrong hands.
Where mobile money meets crypto safely
SIM-swap risk is one reason trade structure matters. Marketplace escrow and direct providers with their own verification add layers between your phone number and your crypto. Read how mobile money and crypto work together and the M-Pesa reversal scam guide for the payment-side risks.
Frequently asked questions
What is the first sign of a SIM swap?
Your phone suddenly loses all network signal for no reason — no calls, no SMS — while other phones nearby work. Treat an unexplained loss of service as an emergency: contact your operator from another phone immediately.
Can someone swap my SIM without my ID?
Procedures differ by operator and country, and criminals have exploited weak agent checks and insider access in the past. That is why the protection steps below matter even if you never share your documents.
Does a mobile money PIN protect me from SIM swap?
It helps, but it is not enough on its own. An attacker controlling your number can attempt PIN resets and receive your one-time codes. Strong PINs, app-level locks and fast action when signal disappears all matter.
Should my crypto accounts use SMS verification?
Where a provider offers an authenticator app or hardware key, prefer it over SMS. SMS codes stop working for their purpose the moment someone else controls your number.
Sources and scope
Official guidance checked on 20 October 2026. Operator procedures change; confirm the current SIM-replacement and fraud-reporting process with your own provider.
- MTN Uganda: Safety of mobile money services — official statement on PINs, OTPs and verifying callers through official support.
- MTN Uganda: SIM-swap verification — operator confirmation that SIM-swap checks reduce fraud and identity-theft risk.
Related guides
How Mobile Money and crypto work together
The three models that connect a Mobile Money wallet to stablecoins, and how they differ per country.
Read guideKenya safetyM-Pesa reversal scams in Kenya
Payment checks, third-party transfers and what to do if an M-Pesa payment is disputed or reversed.
Read guideSafetyHow to use P2P crypto more safely
Practical checks before choosing an offer, while buying, and before releasing crypto to a counterparty.
Read guideCryptoPayAfrica provides independent educational and comparison information. We do not provide investment advice, exchange cryptocurrency, hold customer funds or execute transactions. Cryptocurrency services, fees and availability can change. Verify current information directly with the relevant provider.