eSIM Scam and Phone Line Hijacking: A Guide

What does “eSIM scam phone number hijacking” mean?

Phone number hijacking, also known as SIM swapping, refers to a situation where a criminal takes control of your phone number. In Finland, the police have warned about cases where a traditional SIM card subscription has been switched to an eSIM subscription controlled by the criminal.

When the switch succeeds, your own SIM card may stop working. At the same time, the criminal can receive calls, text messages, and login codes meant for you. Therefore, this is not just a technical disturbance, but a possible early stage of an account takeover.

eSIM itself is not a “scam”. It is a digital SIM card that works in many phones without a physical card. The risk arises when a scammer manipulates the operator’s or victim’s account information so that the number is transferred to the wrong device.

How does eSIM-related phone number hijacking usually proceed?

Most cases start with phishing. The scammer may send a message that looks like a notification from your operator, bank, authorities, delivery service, or a familiar service. The goal is to get you to give up personal data, credentials, or confirmation codes.

When the scammer has enough information, they can try to impersonate you to the operator. The goal is to get the subscription switched to a new eSIM profile or activated on another device. If the verification fails, the number moves under the criminal’s control.

When the number is on the wrong device, the most dangerous part begins: SMS verification codes can end up with the attacker. These can be used, for example, to abuse email, social media, payment services, or online banking functions.

Signs that indicate an eSIM scam

Hijacking often first feels like a common network problem. That’s why these signs should be taken seriously, especially if several appear at the same time.

• The phone loses network connection for no clear reason.
• You cannot make calls, receive calls, or get text messages.
• You get a notification of eSIM activation, a QR code, or subscription change that you did not make.
• You cannot log into email, social media, banking, or other important accounts.
• You see password changes, login attempts, or account activities you don’t recognize.
• The operator tells you that your number has been activated on another SIM or device.

A single network issue does not necessarily mean a crime. But if the connection drops at the same time unusual activity happens on your accounts, the situation must be treated as urgent.

What to do immediately if you suspect phone number hijacking?

The first hour is crucial. The goal is to reclaim your number, stop any financial transactions, and block the attacker’s access to accounts. Do not start with lengthy investigations; proceed step-by-step.

Once you regain control of the subscription, change passwords for your most important accounts. Start with email, banking-related services, cloud accounts, and social media. Log out from unknown devices whenever the service offers that option.

Is eSIM insecure or safer than a physical SIM?

eSIM is secure and convenient in many situations. It cannot be physically stolen from the phone like a removable SIM card. Also, eSIM profile management is controlled by the operator, making direct copying difficult.

Still, eSIM does not eliminate SIM swapping risk entirely. The hijacking often targets the phone number and the customer account, not the digital chip itself. If a criminal obtains enough information or tricks the verification process, even eSIM subscriptions can end up on the wrong device.

Therefore, the right question is not “is eSIM dangerous,” but “how do I ensure subscription changes cannot be made too easily.” This applies to both domestic subscriptions and eSIM services purchased while traveling.

How to protect your phone number before anything happens

Prevention is much easier than recovering a hijacked number. Good protection does not require complicated technology, just a few limits you won’t cross even in a hurry.

• Request from your operator a PIN code or password for subscription changes if available.
• Do not give your personal ID, bank credentials, codes, or subscription information through links sent in messages.
• Use authentication apps, passkeys, or device-based verification on critical accounts when possible.
• Reduce phone number use as a recovery method in services that offer safer alternatives.
• Keep your email account especially well-protected, as it is often used for recovering other accounts.
• Check operator messages, but do not click links directly: access the service manually through the browser or app.

Traveler’s eSIM: how to buy safely without unnecessary risk?

A travel eSIM is different from transferring your domestic phone number. Most travel eSIMs are data packages that provide internet access abroad without a local SIM card. They usually do not transfer your Finnish phone number anywhere.

For security, the best practice is to buy eSIMs from a known service, check device compatibility beforehand, and activate the package only through official apps or trusted emails. If any message claims you need to “confirm your subscription” via a suspicious link, stop immediately.

If you need a data eSIM for travel, start with trusted options and verify compatibility before purchase. MyBestSim’s partners include Yesim, Jetpac, eSIM-On Shop, Ohayu, but the final choice should be based on the destination country, data needs, and validity period.

Before buying, also check if your phone supports eSIM. This is especially important if you use an older Android phone, business phone, or regional model.

Most common mistakes that make it easier for scammers

Phone number hijacking often succeeds because several small mistakes coincide. One shared piece of personal data, one link clicked in haste, and one text message code can be enough together.

When is it a common eSIM problem?

Not all eSIM issues are scams. If you have just bought a travel eSIM and data does not work, the cause may be wrong APN settings, missing data roaming, destination network delay, or phone compatibility. In such cases, your domestic phone number usually does not disappear, and you won’t see suspicious activity on bank or social media accounts.

Suspicion of a scam should arise especially when your actual subscription stops working without your request, you receive eSIM activation notifications, or login attempts appear on your services. This distinction is important so you don’t panic over a simple setup error nor underestimate hijacking.

Summary: eSIM is useful, but the phone number must be protected

eSIM is not the root of the problem. The core issue is that phone numbers are still used far too often for account recovery and verification. When the number is hijacked, the attacker can try to access services that rely on text messages.

The best protection is a combination: caution with messages, operator extra protection for subscription changes, stronger login for important accounts, and quick reaction if the network suddenly disappears. With these measures, you can preserve the benefits of eSIM without your phone number becoming the weakest link.

More information about the phenomenon is available, for example, in the Police warning on phone subscription hijacking and Victim Support’s guide on SIM swapping situations.

FAQ