Unexpected loss of service can be a warning, not proof
A phone that suddenly loses calls, texts, and data may have a network, device, billing, or account problem. It can also be consistent with an unauthorized SIM or number transfer, especially when accompanied by a carrier notice, password-reset message, changed account setting, or unfamiliar login. Treat the combination as urgent without assuming the cause.
Contact the carrier through a known channel
Use another device if the phone is unreliable
Open the carrier's official app or type a known address, or use a number from a statement or account record. Ask whether the SIM, eSIM, device, account PIN, authorized user, or number-port status changed. Follow the carrier's recovery process and record the case number and time.
Do not trust an incoming call that claims to fix the problem and asks for a code. An attacker may use the incident to create a second impersonation attempt.
Protect the accounts that depend on the number
- Secure the primary email account from a device you reasonably trust.
- Review financial, payment, social, cloud, and work accounts for alerts or changed recovery settings.
- Change compromised or reused passwords and sign out unfamiliar sessions where supported.
- Replace text-message authentication with a stronger available method after access is stable.
- Check financial accounts for unauthorized transactions or new payees.
Work in priority order. The account takeover response checklist covers sessions, forwarding, recovery methods, and connected apps. The MFA and account recovery guide helps compare fallback risks.
Build one incident timeline
Record when service stopped, which alerts arrived, who at the carrier confirmed a change, which accounts showed access, and every recovery action taken. Keep case numbers and financial reports together without copying active passwords or codes into the record. A single sequence helps providers distinguish the original number event from later account changes.
Reduce the next transfer risk
Set a carrier account PIN or passcode when offered, protect the carrier account with unique credentials and strong authentication, and ask what number-lock or port-protection controls are available. Keep carrier recovery information outside the phone. Review which critical accounts still use the number for login or recovery so a future mobile interruption does not become an automatic path into email or finance.