DoT asks telcos to bar SMS for 24 hrs on new SIM cards
Agencies
Synopsis
Under the guidelines issued by the DoT, once a telco receives a request for a new SIM on an existing number, it is required to send a message conveying the receipt of such a request. It also needs to check the receipt of the new SIM card through an IVRS call to the subscriber on the current SIM card, to authenticate the request, and the receipt of the new SIM.
By Romit Guha, ET Bureau
The Department of Telecommunications (Dot) said on Monday that the SMS facility (both incoming and outgoing) on numbers requesting subscriber identity module (SIM) swap or upgrade shall be barred for 24 hours on new SIM cards after activation.
SIM swap fraud occurs when fraudsters obtain information regarding a customer through fake calls or phishing and use the same to approach the telecom service provider for a new SIM card on the same number.
Once the SIM card is issued, the old SIM in possession of the customer is deactivated and all new communication to the number is received by the fraudster. This allows the scammer access to information like banking one-time passwords (OTPs) which allow them to steal money from the victim’s account.
This may also happen in case of stolen phones or when unsuspecting customers click on unknown links, which allow the fraudster to duplicate the SIM remotely and gain access to OTPs.
The DoT had issued detailed procedures and steps in 2016 and 2018 for seeking explicit consent of the customers for issuance of new SIM cards in cases of upgradation.
Under the guidelines issued by the DoT, once a telco receives a request for a new SIM on an existing number, it is required to send a message conveying the receipt of such a request. It also needs to check the receipt of the new SIM card through an IVRS call to the subscriber on the current SIM card, to authenticate the request, and the receipt of the new SIM.
At any point, if the customer does not affirm the request, the process of SIM upgrade needs to be terminated immediately.
(You can now subscribe to our Economic Times WhatsApp channel)
ADVERTISEMENT
Telecom operators have 15 days to implement the procedure. The added measure addresses the risk of SIM swap fraud. The DoT has already outlined detailed measures to be implemented when handling a SIM upgrade, reissue, swap request, including multiple layers of confirmation once the customer raises the request.SIM swap fraud occurs when fraudsters obtain information regarding a customer through fake calls or phishing and use the same to approach the telecom service provider for a new SIM card on the same number.
Once the SIM card is issued, the old SIM in possession of the customer is deactivated and all new communication to the number is received by the fraudster. This allows the scammer access to information like banking one-time passwords (OTPs) which allow them to steal money from the victim’s account.
This may also happen in case of stolen phones or when unsuspecting customers click on unknown links, which allow the fraudster to duplicate the SIM remotely and gain access to OTPs.
The DoT had issued detailed procedures and steps in 2016 and 2018 for seeking explicit consent of the customers for issuance of new SIM cards in cases of upgradation.
ADVERTISEMENT
Under the guidelines issued by the DoT, once a telco receives a request for a new SIM on an existing number, it is required to send a message conveying the receipt of such a request. It also needs to check the receipt of the new SIM card through an IVRS call to the subscriber on the current SIM card, to authenticate the request, and the receipt of the new SIM.
At any point, if the customer does not affirm the request, the process of SIM upgrade needs to be terminated immediately.
ADVERTISEMENT
(You can now subscribe to our Economic Times WhatsApp channel)
