--- title: SIM Swap Fraud Starts at the Operator. So Should the Fix. description: SIM swap fraud is surging globally. While regulators focus on counter checks, operators must share real-time SIM change signals with banks. image: https://shush.pw/hubfs/Blog%20News%20%C2%B7%20Text%20only@2x.png --- [Skip to content](https://shush.pw/blog/sim-swap-fraud-operator-api#main-content) [![Shush logo](https://shush.pw/hs-fs/hubfs/Email_signature.png?width=279&height=99&name=Email_signature.png)](https://shush.pw) - [Home](https://shush.pw/) - [Shush Solutions](https://shush.pw/shush-network-authentication) - [Shush Team](https://shush.pw/meet-the-shush-team) - [Resources](https://shush.pw/resources-and-media) Open main navigation Close main navigation - [Home](https://shush.pw/) - [Shush Solutions](https://shush.pw/shush-network-authentication) - [Shush Team](https://shush.pw/meet-the-shush-team) - [Resources](https://shush.pw/resources-and-media) - [Contact us](https://shush.pw/shush-network-authentication#connect) [Contact us](https://shush.pw/shush-network-authentication#connect) November 12, 2026 at 9:05 AM # SIM Swap Fraud Starts at the Operator. So Should the Fix. ![Picture of Eddie DeCurtis](https://app.hubspot.com/settings/avatar/ed1525fd680a8c755cbf3e88924e9be7) [Eddie DeCurtis](https://shush.pw/blog/author/eddie-decurtis) Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://shush.pw/blog/sim-swap-fraud-operator-api) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://shush.pw/blog/sim-swap-fraud-operator-api) [Twitter icon](https://twitter.com/intent/tweet?url=https://shush.pw/blog/sim-swap-fraud-operator-api) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://shush.pw/blog/sim-swap-fraud-operator-api) [envelope icon](mailto:?body=https://shush.pw/blog/sim-swap-fraud-operator-api) ***Summary:** South Africa's regulator wants operators to biometrically verify anyone asking for a SIM swap, the UK's fraud database logged a 402% jump in unauthorised SIM swaps in the first half of 2026, and operators in Portugal and Japan launched new network verification APIs. My take: locking down the counter is necessary, but the operator's bigger job is telling the bank, in real time, that a SIM just changed.*   By Eddie DeCurtis, Co-Founder & CEO, Shush --- Every SIM swap fraud story ends at a bank. It starts at a mobile operator. Someone convinces a store, a call center or a dealer to move a number onto a new SIM, and from that moment every one-time code, reset link and "is this you?" text goes to the attacker. In October 2026, regulators, fraud bodies and operators all pointed at the same place: the network. ## SIM swap fraud numbers keep climbing Cifas, which runs the UK's National Fraud Database, says [unauthorised SIM swap cases rose 402% in the first six months of 2026](https://www.cifas.org.uk/newsroom/fraudscape-2026-6-month-update) compared with the same period in 2025, an increase of 4,109 cases. They now make up 10% of account takeover filings, up from 2%. Cifas's explanation is blunt: SIM swaps "are used to intercept authentication codes, bypass security measures, and facilitate wider account compromise". On October 29, 2026, CityNews reported that Durham Regional Police in Ontario had named a suspect in a SIM swap case. Police say the victim's first warning was that their phone "unexpectedly entered SOS mode and lost connection to their cellular network," and that the suspect allegedly used the number to bypass two-factor authentication. These are allegations, not findings. But notice the detail: the only alarm was a phone that suddenly dropped off the network. The network saw it. Nobody downstream did. ## Regulators are putting SIM swap prevention on the operator On October 28, 2026, South Africa's communications regulator, ICASA, published [draft amendments](https://www.icasa.org.za/news/2026/icasa-publishes-draft-numbering-plan-fifth-amendment-regulations-2026) to its Numbering Plan Regulations. Under the draft, if a subscriber requests a SIM swap, the operator must verify their identity biometrically against Department of Home Affairs records, and "must not approve a request for a SIM-swap if the identity of the subscriber requesting the SIM-swap does not correspond" with the subscriber on record. The draft was published for public comment. I think that's the right instinct. The swap happens inside the operator, so the operator is the natural first line of defence. But a stronger counter check isn't the whole answer. Cifas itself says mobile phone account takeover "remains a significant threat, particularly through organised mobile dealer fraud and SIM swap activity". And MyBroadband notes a practical gap in today's swap notices: a customer abroad without SMS roaming, or asleep in another time zone, may never see the opt-out text before the swap goes through \[6\]. Some swaps will still get through. When one does, the question is whether the bank finds out before the money moves. ## The SIM swap is a signal. Sell it through the SIM Swap API. That's what the CAMARA SIM Swap API is for. A bank can ask the operator whether a number's SIM changed within a window it chooses, anywhere from 1 to 2,400 hours (100 days), with 240 hours (10 days) as the default, or ask for the timestamp of the latest swap. There's also a subscription version that pushes a "swapped" event when a swap happens on a number the bank is watching. That turns the operator's knowledge into a decision the bank can make before it approves a password reset or a transfer. Operators are rolling this out. On October 20, 2026, MEO, NOS and Vodafone launched Number Verification and SIM Swap APIs in Portugal under GSMA Open Gateway, citing a Bank of Portugal report that digital fraud rose 45% in 2025. They plan to add Number Recycle by early 2027. On October 21, 2026, KDDI began commercial service for Number Verification v2 through Google's Firebase, verifying numbers against the operator's SIM records without sending a code. Demand partners are building the same pairing into their products. On October 14, 2026, Zumigo announced silent authentication where each check can come back with real-time phone history, including recencifaft SIM swaps, port-outs and call forwarding. Bureau says its Silent Mobile Verification, launched for UPI in India, adds "network-verified mobile signals to existing authentication and risk assessment systems"; as Voice&Data's coverage notes, it is designed to verify the link between number, SIM and device and does not replace KYC or broader fraud risk checks. That's an honest framing, and it's the right one. Verifying the number is one signal. Knowing the SIM didn't just change is another. Banks need both. That's how we built Shush Sherlock. Sherlock's SIM swap detection queries carrier records for the activation timestamp of the SIM in the device, so a recent swap shows up as an immediate risk signal. It also monitors connection and roaming state changes, including when a device abruptly loses its connection or switches operators, which matches what police described in the Ontario case. Sherlock facilitates 47+ APIs, and the operator sets the price and access while Sherlock powers the billing. ## What I'd tell any mobile operator about SIM swap fraud 1. **Treat swap requests as fraud events, not admin tickets.** Strong identity checks at the counter and in the call center are table stakes, whether or not your regulator mandates them yet. 2. **Expose the result.** Every swap you process is information a bank will pay for. Launch SIM Swap next to Number Verify, not after it. 3. **Push, don't just answer.** Querying works at login. Subscriptions catch the swap that happens at 2 a.m., before the attacker even tries to log in. 4. **Watch the line, not just the SIM.** A phone that suddenly drops off the network is a signal too. SIM swap fraud is the clearest proof that the network knows things nobody else knows. Operators that sell that knowledge protect their customers and build a business. The ones that don't will keep showing up at the start of someone else's fraud story. See you soon. *Eddie* --- ## Sources 1. Cifas, "Fraudscape 2026" (six-month update section on account takeover). Cifas newsroom, "Nearly three in five (59%) fraud-risk cases linked to identity fraud," Aug 4, 2026. [https://www.cifas.org.uk/newsroom/fraudscape-2026-6-month-update](https://www.cifas.org.uk/newsroom/fraudscape-2026-6-month-update) 2. CityNews Toronto, "Oakville man wanted for alleged SIM card swap scam," Oct 29, 2026. [https://toronto.citynews.ca/2026/10/29/oakville-man-wanted-alleged-sim-card-swap-scam/](https://toronto.citynews.ca/2026/10/29/oakville-man-wanted-alleged-sim-card-swap-scam/) 3. Government Gazette No. 55631, Amendment of the Numbering Plan Regulations, 2016, Oct 28, 2026. [https://www.gov.za/sites/default/files/gcis\_document/202610/55631gen4217.pdf](https://www.gov.za/sites/default/files/gcis_document/202610/55631gen4217.pdf) 4. ICASA, "ICASA Publishes Draft Numbering Plan Fifth Amendment Regulations, 2026," Oct 29, 2026. [https://www.icasa.org.za/news/2026/icasa-publishes-draft-numbering-plan-fifth-amendment-regulations-2026](https://www.icasa.org.za/news/2026/icasa-publishes-draft-numbering-plan-fifth-amendment-regulations-2026) 5. Cifas, "Fraudscape 2026." [https://www.fraudscape.co.uk/](https://www.fraudscape.co.uk/) 6. MyBroadband, "New rules to close a big SIM card fraud loophole proposed in South Africa," Oct 28, 2026. [https://mybroadband.co.za/news/cellular/674648-new-rules-to-close-a-big-sim-card-fraud-loophole-proposed-in-south-africa.html](https://mybroadband.co.za/news/cellular/674648-new-rules-to-close-a-big-sim-card-fraud-loophole-proposed-in-south-africa.html) 7. CAMARA Project, SIM Swap API definition (sim-swap.yaml). [https://github.com/camaraproject/SimSwap/blob/main/code/API\_definitions/sim-swap.yaml](https://github.com/camaraproject/SimSwap/blob/main/code/API_definitions/sim-swap.yaml) 8. CAMARA Project, SIM Swap Subscriptions API definition. [https://github.com/camaraproject/SimSwap/blob/main/code/API\_definitions/sim-swap-subscriptions.yaml](https://github.com/camaraproject/SimSwap/blob/main/code/API_definitions/sim-swap-subscriptions.yaml) 9. GSMA, "Portugal Market Launch: Leading Mobile Operators Launch Network APIs to Combat Fraud and Strengthen Digital Trust," Oct 20, 2026. [https://www.gsma.com/solutions-and-impact/gsma-open-gateway/portugal-market-launch-leading-mobile-operators-launch-network-apis/](https://www.gsma.com/solutions-and-impact/gsma-open-gateway/portugal-market-launch-leading-mobile-operators-launch-network-apis/) 10. KDDI, "Commercial Launch of 'Number Verification v2,' Integrated with Google Firebase," Oct 21, 2026. [https://newsroom.kddi.com/english/news/detail/kddi\_nr-1204\_4771.html](https://newsroom.kddi.com/english/news/detail/kddi_nr-1204_4771.html) 11. Zumigo, "Zumigo Makes the Mobile Phone a Frictionless and Fraud-Aware Anchor of Digital Identity," Oct 14, 2026. [https://zumigo.com/the-phone-as-a-frictionless-fraud-aware-anchor-of-identity/](https://zumigo.com/the-phone-as-a-frictionless-fraud-aware-anchor-of-identity/) 12. Voice&Data, "Silent Mobile Verification Adds to India's UPI Security," Oct 15, 2026. [https://www.voicendata.com/telecom/bureau-launches-network-based-upi-authentication-without-otp-12676296](https://www.voicendata.com/telecom/bureau-launches-network-based-upi-authentication-without-otp-12676296) [Thought Leadership](https://shush.pw/blog/tag/thought-leadership) ## Related posts [![](https://shush.pw/hs-fs/hubfs/Screenshot%202024-04-30%20at%208.55.51%20AM.png?height=200&name=Screenshot%202024-04-30%20at%208.55.51%20AM.png)](https://shush.pw/blog/bank-fraud-accounts-hacked-into-using-mobile-sim-card-swap-attack) [Bank Fraud](https://shush.pw/blog/tag/bank-fraud), [Thought Leadership](https://shush.pw/blog/tag/thought-leadership) ## [Bank fraud: Accounts hacked into using mobile SIM card swap attack](https://shush.pw/blog/bank-fraud-accounts-hacked-into-using-mobile-sim-card-swap-attack) [Shush Marketing](https://shush.pw/blog/author/shush-marketing) April 30, 2024 at 8:56 AM Discover the alarming trend of bank fraud where accounts are compromised through the use of mobile... [Read more](https://shush.pw/blog/bank-fraud-accounts-hacked-into-using-mobile-sim-card-swap-attack) [![YTL (Yes) & Shush - Network Authentication APIs](https://shush.pw/hs-fs/hubfs/YesYTL%20%26%20Shush%20PR.jpg?height=200&name=YesYTL%20%26%20Shush%20PR.jpg)](https://shush.pw/blog/ytl-communications-and-shush-partner-to-accelerate-deployment-of-network-authentication-apis-in-malaysia) [Press Release](https://shush.pw/blog/tag/press-release) ## [YTL Communications and Shush Partner to Accelerate Deployment of Network Authentication APIs in Malaysia](https://shush.pw/blog/ytl-communications-and-shush-partner-to-accelerate-deployment-of-network-authentication-apis-in-malaysia) [Shush Marketing](https://shush.pw/blog/author/shush-marketing) April 15, 2026 at 8:00 PM Initial focus on CAMARA APIs marks a key step toward standardized network services in Malaysia... [Read more](https://shush.pw/blog/ytl-communications-and-shush-partner-to-accelerate-deployment-of-network-authentication-apis-in-malaysia) [![](https://shush.pw/hs-fs/hubfs/AI-Generated%20Media/Images/An%20article%20discussing%20the%20risks%20of%20cell%20phone%20SIM%20card%20swaps%20and%20how%20to%20protect%20oneself%20from%20online%20threats.jpeg?height=200&name=An%20article%20discussing%20the%20risks%20of%20cell%20phone%20SIM%20card%20swaps%20and%20how%20to%20protect%20oneself%20from%20online%20threats.jpeg)](https://shush.pw/blog/the-risks-of-cell-phone-sim-card-swaps-stay-safe-online) [Thought Leadership](https://shush.pw/blog/tag/thought-leadership) ## [The Risks of Cell Phone SIM Card Swaps: Stay Safe Online](https://shush.pw/blog/the-risks-of-cell-phone-sim-card-swaps-stay-safe-online) [Shush Marketing](https://shush.pw/blog/author/shush-marketing) April 30, 2024 at 8:40 AM Learn about the dangers of cell phone SIM card swaps and how to protect yourself from online... [Read more](https://shush.pw/blog/the-risks-of-cell-phone-sim-card-swaps-stay-safe-online) [Follow us on LinkedIn](https://www.linkedin.com/company/shush-inc) [Follow us on X](https://x.com/ShushSherlock) - [Home](https://shush.pw) - [Shush Solutions](https://shush.pw/shush-network-authentication) - [Shush Team](https://shush.pw/meet-the-shush-team) - [Resources](https://shush.pw/resources-and-media) --- [![Shush logo](https://shush.pw/hs-fs/hubfs/Email_signature.png?width=279&height=99&name=Email_signature.png "Shush logo")](https://shush.pw) Copyright © 2026, Shush Inc SHUSH INC 1314 E. Las Olas Blvd #271 Fort Lauderdale, FL 33301 +1 609-467-4878⁩ ![SOC 2 Type II certified](https://shush.pw/hs-fs/hubfs/SOC2%20T2%20-%20green%20-%20h.png?width=312&height=146&name=SOC2%20T2%20-%20green%20-%20h.png "SOC 2 Type II certified") [Privacy Policy](https://shush.pw/shush-privacy-policy) [Terms of Use](https://shush.pw/terms-of-use) [Awards and Accreditations](https://shush.pw/awards-and-accreditations) Proud members of the ![GSMA\_new](https://shush.pw/hs-fs/hubfs/GSMA_new.jpg?width=300&height=67&name=GSMA_new.jpg "GSMA_new") ![MEF\_Logo\_black200-1](https://shush.pw/hs-fs/hubfs/MEF_Logo_black200-1.webp?width=300&height=104&name=MEF_Logo_black200-1.webp "MEF_Logo_black200-1") ![cpaasaa\_logo](https://shush.pw/hs-fs/hubfs/cpaasaa_logo.webp?width=300&height=210&name=cpaasaa_logo.webp "cpaasaa_logo") ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Eddie DeCurtis", "url" : "https://shush.pw/blog/author/eddie-decurtis" }, "dateModified" : "2026-11-12T14:40:49.891Z", "datePublished" : "2026-11-12T14:05:18.000Z", "headline" : "SIM Swap Fraud Starts at the Operator. So Should the Fix.", "image" : [ "https://shush.pw/hubfs/Blog%20News%20%C2%B7%20Text%20only@2x.png" ], "mainEntityOfPage" : { "@id" : "https://shush.pw/blog/sim-swap-fraud-operator-api", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://shush.pw/hubfs/Email_signature.png" }, "name" : "Shush" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://shush.pw", "@type" : "Organization", "logo" : "https://shush.pw/hubfs/Shush%20Logo.jpg", "name" : "Shush Inc", "sameAs" : [ "https://www.linkedin.com/company/shush-inc/", "https://x.com/ShushSherlock" ], "url" : "https://shush.pw" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://shush.pw/#website", "@type" : "WebSite", "name" : "Shush Inc", "publisher" : { "@id" : "https://shush.pw" }, "url" : "https://shush.pw" } ```