Someone ported my number

It most likely wasn't a port but a sim swap.
I don't know if that also sends out messages - I'd imagine not since it is supposed to replace a broken/lost sim.
I'm guessing a sim swap would remain on the same network? My numbers been moved to another network as when I ring it it goes to their answering service.
 
I believe Ofcom require operators to provide PAC codes via TXT, Email or a phone call.

When I ported a number from EE using the TXT method I don't recall there being any 2FA involved other than the fact that the request came from my phone and I can't remember whether I had an email notification from them.

Has anyone had access to your unlocked phone or could your email account have been compromised first, it would take seconds to send a PAC request note down the number and then delete the messages; there is all sorts of malware out there that infects devices to steal login details including browser extensions that get compromised.


RWG use Now which I think use Orange which in the UK were swallowed by EE so you could try contacting EE but I'm not sure they would be any help because like Now they wouldn't have access to your account details; have you tried publicly haranging RWG on social media?


I would contact both the police and Ofcom maybe even the ICO but Ofcom and the ICO might just say they don't act on individual complaints its only when at lot of people complain about the same thing that they take any action.




The scary thing is SMS is not secure linus did a video on it over a year ago, its not something the average joe down the pub could do but its possible to send and intercept SMS messages sent to / from a mobile number.

 
Last edited:
I have to wait a month before making a complaint to the ICO. I've been trying to contact RWG via email and their online form, have not received any replies.
 
This is why you shouldn't use SMS/phone for 2FA codes.

Use an authenticator app, and have hardware FIDO keys or at least recovery codes printed as backup.

Having SMS 2FA is just leaving a gigantic back door open that you have no control over.
 
could try creating a linkedin account and messaging the CEO of RWG

 
This is why you shouldn't use SMS/phone for 2FA codes.

Use an authenticator app, and have hardware FIDO keys or at least recovery codes printed as backup.

Having SMS 2FA is just leaving a gigantic back door open that you have no control over.
Sometimes no choice though, but I do agree that SMS should be avoided.

Apple TV+, for example, seems to ask for SMS to send 2FA codes to when logging in, though I haven't checked if it's possible to change that to app.
 
Use an authenticator app, and have hardware FIDO keys or at least recovery codes printed as backup.

I've not heard of FIDO keys before. How do they work, and how many of these would the average person need? A few are showing up when I search on Amazon.


Although I'm not affected by the issues in this thread, I'm following with interest due to how concerning it is and how pretty much anyone can be affected by this.
 
Back
Top Bottom