Media Contact:
Will Wiquist
For Immediate Release
FCC ADOPTS RULES TO PROTECT CONSUMERS’ CELL PHONE
ACCOUNTS
Strengthens FCC Protections Against SIM Swapping and Port-Out Scams
--
WASHINGTON, November 15, 2023—The Federal Communications Commission today
adopted new rules to protect consumers against scams that aim to commandeer their cell phone
accounts. The rules will help protect consumers from scammers who target data and personal
information by covertly swapping SIM cards to a new device or porting phone numbers to a
new carrier without ever gaining physical control of a consumer’s phone. These updated rules
will help protect consumers from SIM swapping scams and port-out fraud while maintaining
their well-established freedom to pick their preferred device and provider.
The Report and Order adopted today revises the FCC’s Customer Proprietary Network
Information (CPNI) and Local Number Portability rules to require wireless providers to adopt
secure methods of authenticating a customer before redirecting a customer’s phone number to a
new device or provider. The new rules require wireless providers to immediately notify
customers whenever a SIM change or port-out request is made on customers’ accounts, and
take additional steps to protect customers from SIM swap and port-out fraud.
These new rules set baseline requirements that establish a uniform framework across the
mobile wireless industry while giving wireless providers the flexibility to deliver the most
advanced and appropriate fraud protection measures available. The Commission also adopted
a Further Notice of Proposed Rulemaking to seek comment on ways to further harmonize these
rules with existing CPNI rules and additional steps the Commission can take to harmonize
government efforts to address SIM swap and port-out fraud.
The FCC is focused on protecting consumers’ data from attacks like these cell phone account
scams. The Privacy and Data Protection Task Force was created to lead the agency’s work on
privacy and data protection issues subject to the Commission’s authority under the
Communications Act. The Task Force coordinates across the agency on the rulemaking,
enforcement, and public awareness needs regarding privacy and data protection activities,
including data breaches. SIM swapping scams and port-out fraud are serious consumer privacy
and data protection threats. In addition, data breaches can increase the risk posed by these
scams by exposing consumers’ information that can make it easier for scammers to steal
consumers cell phone accounts.
What Is SIM Swapping?
SIM swapping takes place when a bad actor convinces a victim’s wireless carrier to transfer the
victim’s service from the victim’s cell phone to a cell phone in the bad actor’s possession.
More information for consumers about these scams is available at: https://go.usa.gov/xMNUF.
What Is Port-Out Fraud?
Port-out fraud takes place when the bad actor, posing as the victim, opens an account with a
carrier other than the victim’s current carrier. The bad actor then arranges for the victim’s
phone number to be transferred (or “ported out”) to the account with the new carrier controlled
by the bad actor. An FCC consumer guide on guarding against this type of fraud is available
at: https://go.usa.gov/xMNUH.
Action by the Commission November 15, 2023 by Report and Order and Further Notice of
Proposed Rulemaking (FCC 23-95). Chairwoman Rosenworcel, Commissioners Carr, Starks,
Simington, and Gomez approving. Chairwoman Rosenworcel, Commissioners Starks and
Gomez issuing separate statements.
WC Docket No. 21-341
###
Media Relations: (202) 418-0500 / ASL: (844) 432-2275 / Twitter: @FCC / www.fcc.gov
This is an unofficial announcement of Commission action. Release of the full text of a Commission order constitutes official
action. See MCI v. FCC, 515 F.2d 385 (D.C. Cir. 1974).
