AT&T Just Dropped a New Weapon Against SIM Swap Attacks

Scams and cyberattacks have gotten a lot more sophisticated over the years. This is why many online services are relying on security measures like two-factor authentication (2FA) as a way to protect online accounts. However, these measures aren’t 100%. This is why AT&T has introduced a new tool that could stop SIM swap attacks in their tracks.

AT&T has announced a new tool called Wireless Account Lock, designed to prevent SIM swap attacks. According to the carrier, it allows users to add an additional layer of security when modifying their accounts.

AT&T says, “The lock forces an extra step before important account changes can be made. It prevents anyone from buying a device on the account, for example, or conducting a SIM swap – moving a phone number to a SIM in a different device.”

If you’re worried that this will be a paid service, don’t. AT&T says it is a free feature available for postpaid accounts. Business users have a similar feature called Business Account Lock, while prepaid customers have their own account lock.

Users can enable it easily via the myAT&T app by going to Services > Mobile Security > Wireless Account Lock. Note that AT&T isn’t the only carrier that offers this type of protection. In fact, you could say that the carrier is a little late to the game. Other carriers, including T-Mobile, Verizon, and Google Fi, already have similar protections in place. But we suppose better late than never.

What are SIM swap attacks?

In case you’re unfamiliar with it, SIM swap attacks occur when the attacker gets hold of your phone number. Then, through social engineering techniques, including phishing, the attacker calls your carrier and requests a SIM change. Once that happens, calls and messages that would have been routed to your phone are now being sent to the attacker’s device.

This means that even when you use 2FA on your account, the one-time PIN that might have been sent to your phone via SMS is now going to the attacker’s phone. This could allow them to make bank transfers or make purchases online and you’d be none the wiser, until it is too late.

With AT&T’s Wireless Account Lock, users can essentially lock down their accounts and prevent changes unless they disable it.