A SIM swap can intercept calls and SMS used for password resets and transaction authentication. The first visible sign may be a phone that suddenly loses network service.
Use another phone to contact the telecom operator.
Telecom complaint and SIM-change records.
Assuming it is ordinary network downtime for several hours.
National Cyber Crime Reporting Portal
Confirm whether the outage affects only one device or the mobile number itself. Contact the telecom operator through another phone and ask whether a replacement SIM, eSIM activation or port request occurred.
Secure financial accounts before waiting for the number to return. Ask banks to restrict mobile and UPI access, reset email passwords, sign out active sessions and change recovery methods. A compromised email account can allow the attacker to re-enter after the SIM is restored.
Report fraudulent telecom activity through the operator and relevant government channels. If financial transactions occurred, use the bank fraud process, 1930 and the cybercrime portal.
| Situation | Meaning | Response |
|---|---|---|
| Network loss | Phone shows no service unexpectedly. | Check operator status immediately. |
| Account alert | Password or UPI reset message appears. | Do not click; secure the account directly. |
| SIM change | Operator confirms a replacement or eSIM. | Request reversal and records. |
| Financial loss | Unauthorised debit follows. | Use bank and cybercrime routes at once. |
Ask the telecom operator for a written complaint number and the available details of the replacement or port request. Preserve the identity-verification trail for investigation.
Use Sanchar Saathi and the operator’s official channels where relevant. Financial recovery still requires separate bank and cybercrime complaints.
The safest approach is to preserve the original record, use the official channel and explain the facts in chronological order. A portal acknowledgement, complaint number or filing receipt is part of the evidence and should be downloaded rather than assumed to remain available forever.
Rules and procedures can change, and the correct action depends on the exact transaction, policy, notice or account. Where money, limitation, criminal allegations, medical causation or a large tax position is involved, qualified professional advice should be obtained before taking an irreversible step.
Fraud response has two parallel objectives: stop additional loss and preserve the evidence needed to trace the first loss. The immediate step is Use another phone to contact the telecom operator. Record the exact time because bank liability, fund tracing, SIM or account containment and police follow-up can all depend on how quickly the incident was reported.
The evidence file should begin with Telecom complaint and SIM-change records. Add the transaction reference, beneficiary, phone number, link, app name, device state and every complaint acknowledgement. Keep original chats and files untouched; explanatory screenshots can be created as copies, but they should not replace the source material.
Do not continue following the fraudster’s instructions in the hope of recovering money. A frequent error is Assuming it is ordinary network downtime for several hours. Use only independently located official numbers and portals. A bank dispute, cybercrime complaint and securities or telecom grievance may all be necessary because each route addresses a different part of the incident.