A fake id and 30 minutes: how verizon let a sim swap wipe a bank account
The thief walked into a Verizon store with a laminate fake and walked out with someone else’s phone number. Thirty minutes later the rightful owner—Reddit user nos583—watched his banking app light up with password-reset emails while his signal bars dropped to zero.
The silent phone that cost a bank balance
Verizon’s own system sent the mandatory “are you sure?” texts, but the customer’s handset was on silent. No reply equals consent inside the carrier’s logic, so the port went through. By the time the victim spotted the alerts, the criminal had already redirected SMS two-factor codes and started draining the account.
Carrier reps are supposed to demand a PIN before any SIM change; if the customer forgets it, a photo ID will do. Nos583’s driver’s license had been stolen months earlier, giving the attacker the golden ticket. Two Verizon employees scanned the bogus license, punched the override, and stamped the transfer complete.
Security tools exist—buried in settings
Verizon offers two free locks: Number Lock and SIM Protection. Enable them and no retail monkey, bribed or bamboozled, can touch your line. The catch: both features are opt-in, off by default, and the carrier never nudges you to flip the switch. Most subscribers still don’t know they exist.
The company’s public line is that “multiple safeguards are in place,” yet its own paperwork shows 1,300 SIM-swap complaints last quarter alone—up 18 % year-over-year. Criminals keep winning because the default path is the insecure one.
What verizon should do tomorrow
First, invert the default: every new line ships with Number Lock on; customers must actively disable it. Second, impose a two-hour cooling-off period for any in-store SIM change; no response to push alerts should equal an automatic denial, not approval. Third, stop letting two bored reps override a PIN with nothing more than a piece of plastic.
Until then, walk into a store with a $20 fake and you can own anyone’s digital life. The equipment is already on the carrier’s shelves; the only missing piece is permission—permission Verizon keeps handing out in 30-minute increments.