Recently, I came across troubling reports that cybercriminals in India are now hijacking phone numbers via eSIM technology, quickly draining victims' bank accounts. One person reportedly lost ₹4 lakh after their number was compromised and OTPs were intercepted.

Scammers impersonate your mobile provider, sending a fake eSIM activation link through SMS or email. When you click it, your physical SIM is deactivated. Suddenly, your phone loses signal, and the scammer's device gains control of your number. From that point, they can intercept every call, SMS, and OTP. With this level of access, they can reset passwords, approve transactions, and potentially drain your accounts.

eSIMs are not inherently less secure than physical SIMs, as both can be hijacked. The main vulnerability is social engineering. However, eSIM scams can occur more quickly because they don't require a visit to the store or the use of a physical SIM card. That's why experts recommend that people remain especially vigilant.

Authorities are raising alarms because victims can lose lakhs in just five minutes. The best defense is to stay vigilant, never click on activation links you didn't request, and confirm directly with your telecom provider if you receive a suspicious message.

What are your opinions? Would you continue using physical SIMs for now, or do you have enough confidence in eSIMs despite the potential risks?

Both eSIMs and physical SIM cards carry risks. The main issue is that people often click on links without verifying their authenticity. Telcos should consider making eSIM activation more secure, such as requiring in-person verification or implementing a 24-hour cooling-off period.

Honestly, telecom companies bear some responsibility here. While they promote eSIM for convenience, their security measures are inadequate. At a minimum, there should be a face verification step before activation.

I believe the best approach is to keep your banking number separate. Use a dedicated SIM card for financial activities and avoid sharing it. Use a different SIM for everyday calls and WhatsApp. This way, even if one gets compromised, your bank OTPs will remain protected.

I primarily use eSIM and haven't encountered any issues. However, I avoid clicking on links. For any changes, I go straight to the provider's app or visit a physical store. The technology itself isn't inherently unsafe; it's people who are being deceived.

1 minute ago, Karen said:

I primarily use eSIM and haven't encountered any issues. However, I avoid clicking on links. For any changes, I go straight to the provider's app or visit a physical store. The technology itself isn't inherently unsafe; it's people who are being deceived.

Same here. I’ve used eSIM for a year without any issues. However, I agree that one wrong click can bring everything to an end. The speed at which scammers can drain accounts makes this very concerning.