Next Level of

Sim Swapping
by Tigeh
Short Version
Requirements:
- Bank Log (recommended but not 100% required)
- Mail Access (highly recommended)
- A burner (phone that you not use for any other activities)
- A SIM Card
- Phone Number you are trying to SIM SWAP (usually you can search it on mail access inbox)
- SSN
- Name
- Current address

How to get things you don’t have in log:

- Search “phone number” on inbox.
- Search first 2 numbers from country prefix so for example if you are trying to SIM Swap someone that lives in Germany, you need to
write “+49”. Here is the list with all country prefixes: https://en.wikipedia.org/wiki/List_of_mobile_telephone_prefixes_by_country
- Look on sent mails to find name, ssn and current address.
- Write “address” or “shipping to” to find the address (your victim might ordered things)
- Write “business” or “business meeting” to find name and possible SSN.

Websites able to sim swap with this guide (tested):

➔ https://www.verizon.com/support/contact-us/
➔ https://www.att.com/support/contact-us/
➔ https://www.t-mobile.com/contact-us
➔ https://www.sprint.com/en/support/contact-us.html
➔ https://www.vodafone.com/news/contact-us
➔ https://www.airtel.in/prepaid-support
➔ https://www.boostmobile.com/support/contact-us.html
➔ https://www.boostmobile.com/shop/virginmobile-welcome
➔ https://tello.com/contact
➔ https://www.cricketwireless.com/contactus

OPSEC Protection:
- Call from a burner
- Do not connect to internet when calling
- Calling with a spoofer is always recommended
- Calling with voice changer that cannot get noticed will be more than perfect
Process of sim swapping:
1) Prepare all requirements. After you get everything you are ready to start the process. Skipping even 1 requirement can result in a
fail.
2) Search what courier owns phone number that you are looking to swap. Website: https://www.freecarrierlookup.com/
3) Enter one of the websites listed above.
4) If chatting is an option you can easily choose that but chatting reps are way “bitches”, while calling you can sim swap instantly (some
couriers even do this automatically via bot)
5) Let’s say you’ve called so you have 99% rate of swapping. Most if not all couriers, got a bot when calling so you have to fill things out
with it. Always select the option that you lost your device including sim.
6) You will get redirected to an operator. From now on within 5 minutes you will get the sim swapped.
7) Tell him you were on a coffee shop (Starbucks or any coffee shop close by to OWNER address), be smart and check on Google Maps
where actual owner lives and with that information, you will give a place close by to his address. After that, tell the rep you left in a
hurry since in some hours you have a very important business meeting with huge names in the “gaming industry” (it’s just an
example, be creative).
8) Afterwards tell him since you left in a hurry, you left your phone right there with all your work and everything you had. Always tell
them you came back to the coffee shop and asked owners and workers about your phone and their answer was that they did not
saw anything.
9) Always be patient with the operator, but he/she needs to hear your emotion on the phone.
10) 99% of the time, after they hear what happened, they will ask you if you got any brand new phone and a brad new sim. Answer to
that YES.
11) When they will hear your answer, they will start asking you basic questions: What’s your name? What’s your phone number?
What’s your date of birth? What’s your current home address? What’s your mail address? And a question that sometimes appear is
“What is your special PIN?”. You got multiple way s to bypass this, you can always say the date of birth as PIN and if they say it is
invalid, tell them you’ve set it long time ago and you would like to reset it via mail. They will do that to confirm you are the actual
owner. After you’ve hit the reset button, tell them the new PIN.
12) Tell them the new sim card you are in possession.
13) Success. You just finished your first sim swap and from now on absolutely everything will be so easy.

Here is a list of issues I’ve personally used over 5 years:

- Phone lost in the airplane.
- Phone lost in the hotel (tell them you were in the holiday with your family and now you are back home since you got a business
meeting)
- Phone lost in the Train
- Phone list in the Uber (actually so good lately)
- Phone lost in the Coffee Shop (actually most known method and the most effective)
- Phone lost at the mall while purchasing new clothes
- Stolen from you – robbed in the night (this is not recommended since sometimes, even tho is very rare, they open police
investigations to “help” you out. This is still affective, but personally I won’t risk SE process)
Long Version
1) Buy a log that contains following:
- Online + Mail Access + Verizon / Att (Bill in mail) – if bill is in the mail cashouts will be easy
- Online + Mail Access + Verioz / Att Carer Pin (verified) – if is not verified there are ways to bypass
2) Call the carrier customer support and connect to the sales department.
3) When calling the bot will ask you for phone number you are calling from
4) Connect to it
5) When bot asks you why you called, you have to say “my device”
6) Bot will ask you for 4 digit pin (you can find this information easily in the log, most of the time pin is the birthday date or year)
7) Success, you sim swapped them.
8) From there you want to buy an unlocked old iPhone from the Facebook Marketplace, Best Buy or Walmart
9) Make sure it isn't new and it's a used phone, you don't want any papertrail starting off to you
10) And make sure the imei is clean and not a blacklisted device (If device / IMEI blacklisted, they won't allow you to swap because
they'll know it's being used illegally)
11) To check if your device is clean or blacklisted: https://imeipro.info
12) Login to Victim’s email account and go to search: Verizon Wireless (or if your log is AT&T put: AT&T)
13) Look around the email for a bill summary for the carrier connected to log (Check spam, trash, anywhere around in the email if you
can't find anything, if nothing appears then it never came attached to the email when u bought it)
14) After you find the bill in email, that means the carrier is attached to that email and is good to go.
15) After you buy a device and make sure it is imei clean and not blacklisted, you need to buy the prepaid SIM card for the specific
carrier connected to your log (If the phone number attached to your logs carrier is Verizon, you will buy a prepaid Verizon ”Bring
Your Own Device” SIM card, if it is AT&T you buy the prepaid version of that and so on)

Quick steps:

1) Logged in the mail access without getting 2fa’d.

2) Deleted all incoming mails from the bank.
3) Double check the courier to see if is the actual courier you are actually trying to sim swap: https://freecarrierlookup.com
4) Copy account and routing number down from all checking/saving accounts connected to log
5) Take picture of one of the statements from checking/savings accounts
6) Check background report + ssn:
- https://beenverified.com
- https://intelius.com
- https://ssndob.cm
7) You need a device with clean imei. Check here: https://imeipro.info
8) Go to Verizon website
9) Login
10) Try to login with same password as bank, if it does not work go ahead and reset password
11) Reset password. (AT&T is different then Verizon since they always ask for special code when connecting to new device, to bypass
that just reset the password don’t try to login with bank details)
12) Click chat with us (usually right side)
13) Click “Manage account and bill” and ask for a representant.
14) Tell them you misplaced your device.
15) Always say that you lost your device, not saying that will result in a 14 days investigation.
 Example:

“ Hello *name of support*, in some hours I have an important business meeting and I literally miss placed my device. Can you guys change
my device as fast as possible?*

Very important:

- Be very creative with the text, you just have to always say that you MISS PLACED, that’s the keyword that triggers their website
- Do not copy paste since they got access to see if you are copy pasting.
- Sometimes they might look your account, if that happens you have to call them up and provide this:
➔ First and last name
➔ Phone number you’ve “lost”
➔ Current address (you have that on log file or mail access)
➔ DOB
➔ Last 4 digits from SN
➔ The special digits pin (you have that too on the mail access)
➔ Security questions
(as I said before with guessing carrier pin, look for every 5 digit combination connected to victim, a full birthday 021465,
is a good example, but it's always usually something personal to the victim they'll always remember)

Once you give them the script, they gonna ask for the account pin, if you have it just give it to them, if not,
Tell them, ”I made my pin a while back when I first made my account and I forgot it”
They gonna ask if they can send it to the phone they have for you on file, say you don't have access to those devices and you want to use the
email you have on file.
Try taking initiative and ask them if they could send a link to the email off rip after you say you forgot the pin.
”I want to verify myself using my email”
After you verify yourself by giving them the pin/via link sent to email, they're going to ask you for your:

- secondary devices IMEI number

- prepaid SIM card ICCID (you can find this on the back of the SIM, roughly a 20 digit code under the longest bar code if you can't
find it on the back of the SIM)

That's it, they're going to send another verification link to the email they have on file (the one you have) and then they're going to tell you to
turn off your phone

How to verify that you sim swapped right?

- Set LTE on.

- Open any website and if it is loading without any issues it means you swapped successfully.
Fingerprinted.
Leaking not
allowed.