cancel
Showing results for 
Search instead for 
Did you mean: 

No ID check when asking for a SIM duplicate

JMM1
I'm a participant level 3
I'm a participant level 3

Hi,

 

I just went to a Fido store near my place to ask for a SIM duplicate because I have a new phone and the old SIM card was too big. 5 minutes later, without showing any ID whatsoever, I have the new SIM card.

 

No wonder sim swapping is a problem. If I want to avoid anyone that is not me from getting a duplicate of my SIM, what should I do?

 

Thanks.

9 REPLIES 9

Cawtau
Senior MVP Senior MVP
Senior MVP

Hello JMM1,

 

  Welcome to the community!

 

  I don't think the SIM you received would have been a duplicate of your old one as that isn't possible. The SIM you received would not have been associated with any account or phone number. You would need to update your SIM card via My Account --> Usage & Services --> Mobile --> Quick Actions (near bottom of page) --> Update SIM card,  to transfer your account and phone number to your new SIM. Since the new SIMs are not unassigned and updating the SIM card are done ourselves via My Account, there is no need for a verification of ID.

 

  You should note that your old SIM would be deactivated. It's not possible to have two SIMs active with the same phone number.

 

  That said, did they update the SIM for you at the store? If so, I agree that they probably should have verified your ID before doing so.

 

Hope this helps 😀

 

Cheers

 

 


Hello again,

 


@Cawtau wrote:..... Since the new SIMs are not unassigned and updating the SIM card are done ourselves via My Account, there is no need for a verification of ID...

  Oops! My apologies, that should be ...are not assigned... or ...are unassigned...

 

  Sorry for any confusion caused 😬

 

Cheers

 


JMM1
I'm a participant level 3
I'm a participant level 3

Hi,

 

Yes, I understand what you mean. However, my new SIM was activated at the store by the employee, no ID verification done, and I was using it immediately.

Hello again,

 

  Thank you for the additional information. I do understand your concern, however, not checking ID in this case would unlikely result in a SIM swap hack.

 

  In this case, you were in possession of your SIM card and the account and phone number were transferred to another SIM which remains in your possession. A concern might be whether the device was stolen or not. If the device was stolen and the SIMs switched, the owner of the account would remain the same and would still be able to block activity on the account.

 

  The more concerning issue of SIM swapping is that ownership of the phone number changes hands. Rather than switching SIMs, the fraudsters somehow convince another provider to port the phone number to their account. In this case, the original owner of the phone can not prevent activity on the phone number and fraudsters have unhindered access to the number.

 

  Yes, switching SIMs for a possibly stolen device is troubling since someone could bypass a phone's security features by using a different device to access the phone number. However, blocking activity on the account should be able to prevent fraudulent usage of the phone number.

 

Hope this helps 😀

 

Cheers

 

 

 


JMM1
I'm a participant level 3
I'm a participant level 3

"In this case, you were in possession of your SIM card and the account and phone number were transferred to another SIM which remains in your possession"

 

How did they know that my SIM card was in my posession? No one checked. Even if I present a SIM card, how do they know it's the SIM that belongs to my number? No one checked either.

 

So you're telling me that anyone can walk into a Fido store, say they are me, ask for a new SIM card and get one, and that is the normal protocol and everything is fine with that.

 

No wonder SIM swapping is a thing.

FidoJulien
Former Moderator
Former Moderator

Hey @JMM1

 

I'll send you a PM so we can take a look into this further. 

 

Talk to you soon!



JMM1
I'm a participant level 3
I'm a participant level 3

Hi @FidoJulien 

 

Thanks for your reply. I haven't received any private message yet, though.

FidoJulien
Former Moderator
Former Moderator

That's pretty odd @JMM1! I sent you a new one.



Hello again,

 


@JMM1 wrote:...How did they know that my SIM card was in my posession? No one checked. Even if I present a SIM card, how do they know it's the SIM that belongs to my number? No one checked either...

  In my first reply, I mentioned that I agreed they probably should have checked your ID to verify the phone wasn't stolen. As mentioned above, if the phone was stolen, the new SIM would still be registered to your account and if you blocked your account because you reported your phone was stolen then the new SIM would be blocked.

 


@JMM1 wrote:..Even if I present a SIM card, how do they know it's the SIM that belongs to my number? No one checked either....

 The SIM card has a serial number on it which is associated with your account. When updating SIMs, they require both the old SIM card number as well as the new SIM card number. If the serial number on the SIM provided does not match the one used on your file, the SIM update procedure cannot proceed.

 


@JMM1 wrote:..So you're telling me that anyone can walk into a Fido store, say they are me, ask for a new SIM card and get one...

  New SIM cards are not associated with any account or phone number, so yes, anyone can go in and ask for a new SIM card. To swtich the SIM, you would need to update the SIM via My Account, as described above. In order to do so, you would need to enter the serial number of the SIM currently associated with your account. Unless someone has physical access to your phone, they won't be able to update the SIM.

 

  Again, if the update was done in store, they probably should have verified your ID.

 


@JMM1 wrote:..No wonder SIM swapping is a thing.

  As alluded to above, what you noted isn't the SIM swap scam. Yes, you switched SIMs, however, if the phone was stolen, that would be theft and not this particular scam. Rather, the fraudsters somehow convince another provider to port the phone number to their account. The device was never stolen, only the phone number was transferred to a different account.

 

Hope this helps 😀

 

Cheers