T-Mobile Says Successful Customer SIM Swap Attacks Fell More Than 99% Since 2022

T-Mobile said successful customer SIM swap attacks fell more than 99% since 2022, even as attempted intrusions rose 37% over a recent 12-month period. The figures show fewer successful swaps alongside a rise in attempted intrusions.

Credential-based attempts fell 35% over that same 12-month period. T-Mobile also reported more than 99% fewer phishing-related credential compromises among employees. The company described its cybersecurity metrics as based on internal data.

T-Mobile credited account protections, including identity checks, SIM Protection and Port-Out Protection, for the decline in successful customer SIM swaps. Nearly 100% of its workforce uses phishing-resistant FIDO2 hardware security keys instead of passwords. Employees verify their identities with a selfie and government-issued ID before receiving credentials.

The company said it deployed a hybrid zero-trust platform across its workforce in six months. The platform has blocked more than 6 million online threats since launch. T-Mobile did not give a launch date for that total.

The company also said it blocked nearly 3 billion scam and spam texts before delivery in 2025, while seeing nearly 50% more such messages than in 2024. It cautioned that security measures cannot prevent every threat or incident.

In a SIM swap attack, someone moves a customer’s phone number to a SIM card or eSIM they control, so calls and texts reach their device. T-Mobile’s figures cover different measures, including attempted intrusions, credential-based attempts and successful account attacks.