A SIM-swap attack lets fraudsters intercept one-time codes and reset credentials. Victims often discover the loss only after bank, email or exchange alerts arrive too late.
Ask the mobile carrier for porting or SIM-change records, ticket numbers and the time the number moved. Preserve bank and exchange login alerts, device lists and any support chats opened under the compromised number.
Change credentials from a clean device and secure backup authentication methods that do not rely on the hijacked SIM. Document each remediating step with dates for later chronology.
Counsel assessing recovery options will look for regulated institutions that still hold identifiable balances or KYC data. Carrier records alone rarely reverse transfers, but they help prove unauthorized access.
Disclaimer: This article provides general information only. It is not legal advice and does not guarantee recovery in any matter.