Reviewed guide | 2026-10-12
After a SIM swap: regaining control of exchange accounts in South Africa step by step
A SIM swap hands your phone number to a criminal, along with any SMS codes. The order of steps South African users should follow to stop the attack, recover exchange accounts and remove SMS as a weak point.
Multiple exchanges | South Africa | ZAR | fees, access and account safety
The first sign of a SIM swap is often small: your phone suddenly shows no service, or you receive a message about a SIM change you did not request. Minutes later the attacker may be receiving your SMS codes, resetting passwords and attempting withdrawals. Speed matters, but so does order. Securing the email account before the exchange, and the mobile number before everything else, makes the difference between stopping an attack and chasing it. This guide sets out the order to follow for exchange accounts at Binance, OKX, Bybit, Bitget or similar platforms.
Reclaim the number first
Contact your mobile network operator from another phone or in store immediately and report an unauthorised SIM swap. Ask them to block the fraudulent SIM and restore the number to you. Bring identification. Until the number is back, any account that relies on SMS remains exposed, so this step comes before everything else, even before changing passwords that the attacker could reset again by SMS.
Secure the email account next
Your email is the master key for password resets on most exchanges. From a clean device, change the email password, remove unknown recovery phone numbers and forwarding rules, sign out other sessions and enable app-based verification. Attackers often add forwarding rules to hide exchange alerts, so check settings carefully rather than only the inbox.
Then lock down each exchange
Sign in to each exchange using the official app or bookmarked site. If you can, change the password, end all other sessions, and check withdrawal history, address book and API keys for anything you did not add. Many exchanges offer a way to temporarily freeze the account from the security page or help centre; use it if you see suspicious activity. If you cannot sign in, start the official recovery process and tell support it was a SIM swap.
Remove SMS as a single point of failure
Once access is restored, switch each exchange from SMS verification to an authenticator app or passkey, add a withdrawal allowlist and keep recovery codes on paper. Ask your network operator whether they offer extra protection on SIM changes. Keep a written record of dates, reference numbers and support tickets in case you need them for a police report or later questions.
Risk boundary: South Africa Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Contact your mobile operator first to block the fraudulent SIM and restore your number.
- Secure the email account and remove unknown forwarding rules before touching any exchange.
- Check withdrawals, address book and API keys on each exchange and freeze accounts if needed.
- Replace SMS verification with an authenticator app or passkey once access is restored.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.