I'm guessing a sim swap would remain on the same network? My numbers been moved to another network as when I ring it it goes to their answering service.
-
Notice regarding image hosts and attachments. See here.
Someone ported my number
- Thread starter joey1211
- Start date
I believe Ofcom require operators to provide PAC codes via TXT, Email or a phone call.
When I ported a number from EE using the TXT method I don't recall there being any 2FA involved other than the fact that the request came from my phone and I can't remember whether I had an email notification from them.
Has anyone had access to your unlocked phone or could your email account have been compromised first, it would take seconds to send a PAC request note down the number and then delete the messages; there is all sorts of malware out there that infects devices to steal login details including browser extensions that get compromised.
RWG use Now which I think use Orange which in the UK were swallowed by EE so you could try contacting EE but I'm not sure they would be any help because like Now they wouldn't have access to your account details; have you tried publicly haranging RWG on social media?
I would contact both the police and Ofcom maybe even the ICO but Ofcom and the ICO might just say they don't act on individual complaints its only when at lot of people complain about the same thing that they take any action.
The scary thing is SMS is not secure linus did a video on it over a year ago, its not something the average joe down the pub could do but its possible to send and intercept SMS messages sent to / from a mobile number.
When I ported a number from EE using the TXT method I don't recall there being any 2FA involved other than the fact that the request came from my phone and I can't remember whether I had an email notification from them.
Has anyone had access to your unlocked phone or could your email account have been compromised first, it would take seconds to send a PAC request note down the number and then delete the messages; there is all sorts of malware out there that infects devices to steal login details including browser extensions that get compromised.
RWG use Now which I think use Orange which in the UK were swallowed by EE so you could try contacting EE but I'm not sure they would be any help because like Now they wouldn't have access to your account details; have you tried publicly haranging RWG on social media?
I would contact both the police and Ofcom maybe even the ICO but Ofcom and the ICO might just say they don't act on individual complaints its only when at lot of people complain about the same thing that they take any action.
The scary thing is SMS is not secure linus did a video on it over a year ago, its not something the average joe down the pub could do but its possible to send and intercept SMS messages sent to / from a mobile number.
Last edited:
could try creating a linkedin account and messaging the CEO of RWG
uk.linkedin.com
Andrew Davies - RWG Mobile | LinkedIn
Experience: RWG Mobile · Education: University of Leicester · Location: Greater Newport Area · 500+ connections on LinkedIn. View Andrew Davies’ profile on LinkedIn, a professional community of 1 billion members.
uk.linkedin.com
Sometimes no choice though, but I do agree that SMS should be avoided.
Apple TV+, for example, seems to ask for SMS to send 2FA codes to when logging in, though I haven't checked if it's possible to change that to app.
Soldato
- Joined
- 10 May 2004
- Posts
- 13,241
- Location
- Sunny Stafford
I've not heard of FIDO keys before. How do they work, and how many of these would the average person need? A few are showing up when I search on Amazon.
Although I'm not affected by the issues in this thread, I'm following with interest due to how concerning it is and how pretty much anyone can be affected by this.
I've been binge watching youtube and the recommendation is to get two. One for day to day use and the other kept in a safe place in case you lose the other.
For those in the know, is the £60 Yubikey 5 worth the upgrade against the £30 Security Key model?
Letters sent to the head offices of RWG and Now Mobile as their support was useless. Basically 'you agreed to the port, contact your new carrier'.
Last edited:
Interesting, never heard of those before.
Associate
- Joined
- 28 Nov 2011
- Posts
- 2,075
Tbh, this is why you should avoid all these cheap MVNO companies. Majority of them are poorly run, they're cheap for a reason.
Some (Lebara) have zero 2fa methods available.
Last edited:
You have a FIDO key, set it up the same as any other 2FA. You plug it in, set up a PIN. When you get challenged to enter your 2FA, instead of getting an SMS, you just plug the key in a USB port and enter your pin, then touch the key, job done. Mine are the Security Key NFC I think...although both USB-A....I need to get a USB-C one really now I'm almost fully migrated to USB-C.
I've two keys, one on my keyring, once stored at home. Those are used to secure my email accounts and password manager (Proton Pass). Also a printout of recovery codes stashed somewhere as a last resort.
I wouldn't trust any mobile company on principle. If you use SMS/Phone 2FA you are effectively just handing the keys to your accounts to your mobile provider and trusting them.
Use authenticator apps, printed codes, FIDO keys.....and only then are YOU in control of your accounts.
Associate
- Joined
- 28 Nov 2011
- Posts
- 2,075
Yeah my point was basically, If a company can't even offer the basic 2FA from yester-year, why would you trust them with anything at all (Personal Data/reliability etc)
Soldato
- Joined
- 22 Aug 2005
- Posts
- 9,281
- Location
- Clydebank
how do u use an authenticator app ? Is there lots of them ? Can i use any one ? how does the website know i have an authenticator app ? Does this mean I need my phone to login to things ?
You just get an option to authenticate with security key. It prompts you to insert the key and press the button on it, then you’re logged in.
An Authenticator app just generates codes you then enter when prompted. Rather than getting an SMS with a code, you just open the Authenticator app, select the account, and type in the code that’s shown. You do need your phone to use this method.
This is why I have Authenticator app, and security keys. Always have a backup.
Do they work on your mobile
Last edited:
Soldato
- Joined
- 10 May 2004
- Posts
- 13,241
- Location
- Sunny Stafford
This forum is on authenticator app. It shows up as Overclockers UK.
Here's how it's going...
13th March: Send letter to RWG and Now stating that my number has been ported out without my consent.
24th March: Receive an email from RWG acknowledging receipt of the letter.
27th March: RWG acknowledge that the number has been ported and will send a new SIM card. I email RWG every third day informing them that the SIM card has yet to arrive. I get told it's on it's way.
17th April: SIM card finally arrives but RWG now have trouble porting my number back.
24th April: RWG inform me that they will need to send another SIM card
1st May: The Communications Ombudsman contact me after I contacted them back in March (thx Steampunk), but they had to wait 8 weeks until they could intervene. I send them all email communications between myself and RWG
2nd May: New SIM card arrives.
13th May: My number finally gets ported back to RWG where I immediately move it to another provider.
2nd June: The Ombudsman decide that I should receive £75 as compensation from RWG, yet to be received.
8th July: Compensation paid into bank account.
I was only in communication with one person at their support department (maybe there's only one there), and I swear they were just playing for time to allow whomever more time to get into my accounts. As soon as the Ombudsman got involved, things got sorted pretty quickly.
13th March: Send letter to RWG and Now stating that my number has been ported out without my consent.
24th March: Receive an email from RWG acknowledging receipt of the letter.
27th March: RWG acknowledge that the number has been ported and will send a new SIM card. I email RWG every third day informing them that the SIM card has yet to arrive. I get told it's on it's way.
17th April: SIM card finally arrives but RWG now have trouble porting my number back.
24th April: RWG inform me that they will need to send another SIM card
1st May: The Communications Ombudsman contact me after I contacted them back in March (thx Steampunk), but they had to wait 8 weeks until they could intervene. I send them all email communications between myself and RWG
2nd May: New SIM card arrives.
13th May: My number finally gets ported back to RWG where I immediately move it to another provider.
2nd June: The Ombudsman decide that I should receive £75 as compensation from RWG, yet to be received.
8th July: Compensation paid into bank account.
I was only in communication with one person at their support department (maybe there's only one there), and I swear they were just playing for time to allow whomever more time to get into my accounts. As soon as the Ombudsman got involved, things got sorted pretty quickly.
Last edited:
NOW mobile provide the support for them now and there's hardly any choice for light PAYG customers because Ofcom have let the mobile operators pretty much kill off all the PAYG plans by charging absurd call rates of 40-50p /minute or text and having min top ups / credit that expires.
It should never have happened and theres still no explanation as to how it happened but once a number has been ported to a different provider I imagine forcing the new provider to return the number can't have been an easy process.