Skip to contentSkip to navigationSkip to topbar
Rate this page:
On this page

Lookup SIM Swap Overview


(information)

Info

Lookup SIM Swap is currently in Private Beta . Request access now.(link takes you to an external page)


What is SIM swap fraud?

what-is-sim-swap-fraud page anchor

SIM swap fraud occurs when a scammer hijacks a victim's mobile phone number in order to take over their online accounts. To hijack a mobile phone number, the scammer will typically socially engineer(link takes you to an external page) a support agent at a mobile carrier, and port the victim's phone number to a SIM card that they control. After the SIM is activated, the scammer is able to receive the victim's texts and phone calls. They then begin to access their online accounts by going through account recovery flows that rely on SMS one-time passcodes or knowledge-based authentication, which the scammer has already collected answers for. These types of attacks can cause severe financial impact on an individual and unfortunately have been on the rise. Based on a study from Action Fraud(link takes you to an external page), there has been a 400% rise in the number of SIM swap fraud cases in the United Kingdom during the last five years. With many well-known individuals being SIM swapped, you may have seen it in the news.

Even Europol(link takes you to an external page) has printed this notice to raise awareness on the scam:

Infographic on SIM Swapping, details of infographic listed below.
  • SIM swapping occurs when a fraudster, using social engineering techniques, takes control over your mobile phone SIM card using your stolen personal data.
  • A fraudster obtains the victim's personal data through e.g. data breaches, phishing, social media searches, malicious apps, online shopping, malware, etc.
  • With this information, the fraudster dupes the mobile phone operator into porting the victim's mobile number to a SIM in his possession
  • The fraudster can now receive incoming calls and text messages, including access to the victim's online banking
  • The victim will notice the mobile phone lost service, and eventually will discover they cannot login to their bank account

Have no fear, Twilio Lookup is here with — Lookup SIM Swap, our answer to this problem of mobile phone number compromises.

What is Lookup SIM Swap?

what-is-lookup-sim-swap page anchor

Lookup SIM Swap provides real-time authoritative data, directly sourced from mobile network operators, telling you if the SIM linked to a mobile phone number has recently changed . This gives you assurance that the mobile channel can be used for communications or authentication with your user. It also can help you assess the potential risk that a mobile phone number, and the associated user's account, has been potentially compromised. Twilio has direct connections with carriers all over the world to offer one of the largest networks of real-time SIM swap data. This valuable data is made available through the Lookup API, giving you maximum flexibility for use in your application.

When should I use SIM Swap in my app?

when-should-i-use-sim-swap-in-my-app page anchor

There are many possible times to assess the potential risk that a phone number is compromised, where you could consider integrating a Lookup SIM Swap query. Here are a few:

  • New account opening
  • User requests two-factor one-time passcode
  • User is making high-risk transaction
  • High-value user has logged in
  • User makes inbound call into call center
  • Outbound security alert is sent to user

You can use the data returned from SIM Swap to assess the potential risk that a mobile phone number is compromised. You can further qualify that a request may not be normal by looking at location, device, or IP information then trigger a SIM Swap request. By receiving the last datetime that a phone number has been SIM swapped, you have full control over the business logic and time threshold (e.g., 72 hours) that you choose to trigger any actions on suspicion of compromise.

Depending on the outcome of the query, you could take the following actions:

  • Step-up auth via different channel
  • Withhold transaction
  • Put hold on account for 3 days
  • Require customer to speak with agent or go to branch

How does Lookup SIM Swap work?

how-does-lookup-sim-swap-work page anchor

Request API access

request-api-access page anchor

If you're interested in using Lookup SIM Swap and participating in the Private Beta, submit this form(link takes you to an external page). Access will be granted to a limited set of participants on a rolling basis.

Send a mobile phone number to the Lookup API to make a SIM Swap request:


_10
curl -X GET \
_10
'https://lookups.dublin.ie1.twilio.com/v2/PhoneNumbers/+447772000001?Fields=sim_swap' \
_10
-u $TWILIO_API_KEY:$TWILIO_API_KEY_SECRET

The response contains a sim_swap object, which has information about the last SIM change associated with the mobile number:


_23
{
_23
"calling_country_code": "44",
_23
"country_code": "GB",
_23
"phone_number": "+447772000001",
_23
"national_format": "07772 000001",
_23
"valid": true,
_23
"validation_errors": null,
_23
"caller_name": null,
_23
"sim_swap": {
_23
"last_sim_swap": {
_23
"last_sim_swap_date": "2020-04-27T10:18:50Z",
_23
"swapped_period": "PT15282H33M44S",
_23
"swapped_in_period": false
_23
},
_23
"carrier_name": "Vodafone UK",
_23
"mobile_country_code": "276",
_23
"mobile_network_code": "02",
_23
"error_code": null
_23
},
_23
"call_forwarding": null,
_23
"line_type_intelligence": null,
_23
"url": "https://lookups.dublin.ie1.twilio.com/v2/PhoneNumbers/+447772000001"
_23
}

(information)

Info

The example request above uses the Ireland region (IE1). Check out Using Lookup with Twilio Regions for more information about how to select the Twilio Region that your request is processed out of. Lookup fully supports data residency using the IE1 region when making SIM swap requests to EU countries, as well as the United Kingdom.

The description of the fields returned in the last_sim_swap object is provided in the API docs, but it's important to understand the swapped_period and swapped_in_period fields. Let's unpack that.

How to use the last_sim_swap fields

how-to-use-the-last_sim_swap-fields page anchor

Carriers provide their data to Lookup SIM Swap in a variety of ways. For example, not all countries or carriers will return the exact SIM swap date, but Lookup SIM Swap will return it as the last_sim_swap_date field when it's available. To standardize all these different methods of conveying SIM swap information, we use the fields swapped_period and swapped_in_period. Both of these values together allow you to answer a question like, "Was the SIM for this phone number swapped in the last 24 hours?" This is done by configuring the swapped_period field to hold the trailing time period that you're interested in knowing if a SIM has been swapped, for example 24 hours, and using the swapped_in_period field to indicate yes or no. Find more information about the field descriptions from the API docs.

(information)

Info

The swapped_period field is configured one-time during onboarding and cannot currently be configured via the API. To update this field, contact Support(link takes you to an external page).

Onboarding to Lookup SIM Swap

onboarding-to-lookup-sim-swap page anchor

To access Lookup SIM Swap, apply for use case approval from the major carriers in the country that you want to make lookups in. Some carriers may require that you have specific disclosures in your terms of service or privacy policy. Twilio will guide you through this process and submit your application(s) on your behalf. Carrier approvals can take between 2-4 weeks after which your account will be configured and you'll be off and running.

(warning)

Warning

For the Beta, we are supporting countries in Europe, Latin America, and North America in the table below. However, we may not have complete coverage from all the major carriers in a given country. Pricing also varies based on country. Please reach out to us(link takes you to an external page) to our latest coverage, which is continually expanding, as well as detailed pricing information.

Europe: **

  • France
  • Germany
  • Italy
  • Netherlands
  • Spain
  • United Kingdom**

Latin America:

  • Brazil
  • Colombia

North America:

  • Canada
  • United States
(warning)

Warning

SIM Swap coverage is dependent on data from the major carriers in each country. Countries listed above may yet include all their major carriers at this time.

In addition to SIM Swap, we are also offering our Call Forwarding package. This tells you if a user has configured their mobile phone number, with their carrier, to forward their calls to another phone number. You can use this to detect a potential compromise of a user's voice channel, which is useful prior to sending a voice one-time passcode or critical outbound voice communication. This feature is only available in the United Kingdom supporting major carriers; it also requires carrier pre-approval prior to use.


Rate this page: