Vodacom Sim Swap

J

juBa

Senior Member
Joined
Nov 24, 2011
Messages
738
Reaction score
29
Location
Pretoria
Just walked into a Vodacom store in Pretoria and asked to do a sim swap (on a contract sim) as I got a new phone that takes a nano sim card. The consultant just asked me for the sims packaging to get the serial number etc etc......

That was it. Nothing else required. Sim swap done and dusted.

Now the issue is, I was not asked for my ID docs, proof of residence and all of that - again, this is a contact sim.

But even worse than that, the contract is not even on my name, its on my Dads name. I had all the necessary documents on hand as well but I refrained from showing him anything just to see if he would ask for it or not, he didn't.

Isn't this how all the cellphone number fraud/ bank account fraud happens? Surely they have to ask for some kind of proof of identity and so on? Especially for a contract sim.

Also, I remember Vodacom had a deal with Deezer and that customers can pay with their airtime. So I asked the consultant about it (As I couldn't find how to do this online) and he didn't even know what it is.

Very weird day :confused:
 
Did you have the original SIM on you and did they do anything with it?

As that changes the whole scenario.

Also there is normally an SMS after a SIM swop where you can block it from happening if you didn't request it.
 
Yup I did, but they didn't know that and didn't ask. Yeah I got the SMS, Im not trying to cause any issues or anything was just wondering how it all happens because when you read these stories about people, especially pensioners getting their life savings stolen from them its really sad to hear/ read. And a lot of those cases are linked to sim card fraud.
 
juBa said:
Yup I did, but they didn't know that and didn't ask. Yeah I got the SMS, Im not trying to cause any issues or anything was just wondering how it all happens because when you read these stories about people, especially pensioners getting their life savings stolen from them its really sad to hear/ read. And a lot of those cases are linked to sim card fraud.
Click to expand...

Yeah no for sure it's very questionable.

I had to give driver's license recently and proof of residence, but largely because I volunteered it so maybe wouldn't have asked for the proof of residence.

I just figured if you had the working SIM it would serve as authentication.
 
SauRoNZA said:
Did you have the original SIM on you and did they do anything with it?

As that changes the whole scenario.

Also there is normally an SMS after a SIM swop where you can block it from happening if you didn't request it.
Click to expand...

Even if he did, ID must still be requested from the client.

And you are correct. The system delays the sim swop for 2 hours before it goes through and a SMS is sent to the client instructing them to contact customer care should they not be aware of the sim swop in progress.
 
Ockie said:
Even if he did, ID must still be requested from the client.

And you are correct. The system delays the sim swop for 2 hours before it goes through and a SMS is sent to the client instructing them to contact customer care should they not be aware of the sim swop in progress.
Click to expand...

Which can still be a flawed system, as I am on prepaid and I don't receive SMS or calls or can make calls. I normally take my sim out and put a local sim in.

So when my phone or sim is out of reach / not working a fraudulent swap can still happen.
 
Just something to be weary about I guess. The 2 hours is a nice touch though, but there is always an instance when you dont have access to your phone or reception for a few hours and in that case its still a security issue. Thanks for the Deezer link, Ive snooped around there but still unable to attach it to my profile and pay with airtime. Ill phone VC customer care tomorrow, hopefully they'll be more clued up about it.

moklet said:
Which can still be a flawed system, as I am on prepaid and I don't receive SMS or calls or can make calls. I normally take my sim out and put a local sim in.

So when my phone or sim is out of reach / not working a fraudulent swap can still happen.
Click to expand...

This.
 
moklet said:
Which can still be a flawed system, as I am on prepaid and I don't receive SMS or calls or can make calls. I normally take my sim out and put a local sim in.

So when my phone or sim is out of reach / not working a fraudulent swap can still happen.
Click to expand...

A balance still needs to be struck. We cant delay a sim swop for 5 hours. If you are a victim of theft and need a new sim, you as a customer would not be happy if we told you ok, but it will only start working after 5 hours due to security concerns. It is not perfect, but it is something. Also, the stores need to do double authentication on the system to do a sim swop. Two people need to give the all clear before the system will allow it to go through.
 
Ockie said:
A balance still needs to be struck. We cant delay a sim swop for 5 hours. If you are a victim of theft and need a new sim, you as a customer would not be happy if we told you ok, but it will only start working after 5 hours due to security concerns. It is not perfect, but it is something. Also, the stores need to do double authentication on the system to do a sim swop. Two people need to give the all clear before the system will allow it to go through.
Click to expand...

Still the risk that someone's bank account gets emptied(The problem is not only related to bank accounts, your email and other e-services can also be hacked due to fraudulent sim swap.)

Although a hassle I think there should be far more stricter rules, checks and regulations as a fraudulent swap can have severe implications, hopefully with the phasing out of Old ID Books things will help.

For a starter I think banks and cellphone companies must have a data exchange in place where the banks are informed of a sim swap, and banks should block internet banking until the customer has been verified by the bank. Banks should have copies of ID's and should be able to verify ID presented with a copy on file (compare photo's), maybe even ask to verify banks cards pins etc. (Current ID books are to easy to falsify).

Might seem like a hassle, but rather a hassle then loosing your life savings because you want convenience.

Of course people should practice safe internet (don't fall for phising etc) habits, but unfortunately that won't happen in a while as many people are still internet illiterate
 
Last edited:
moklet said:
Still the risk that someone's bank account gets emptied(The problem is not only related to bank accounts, your email and other e-services can also be hacked due to fraudulent sim swap.)

Although a hassle I think there should be far more stricter rules, checks and regulations as a fraudulent swap can have severe implications, hopefully with the phasing out of Old ID Books things will help.

For a starter I think banks and cellphone companies must have a data exchange in place where the banks are informed of a sim swap, and banks should block internet banking until the customer has been verified by the bank. Banks should have copies of ID's and should be able to verify ID presented with a copy on file (compare photo's), maybe even ask to verify banks cards pins etc. (Current ID books are to easy to falsify).

Might seem like a hassle, but rather a hassle then loosing your life savings because you want convenience.
Click to expand...

Or maybe the banks should do what Capitec did and move away from sending OTP to cell numbers via SMS.
 
Ockie said:
Or maybe the banks should do what Capitec did and move away from sending OTP to cell numbers via SMS.
Click to expand...

Yup that is more secure wonder why FNB stopped it. The risk would be many many times smaller as they literary have to get the device which is a lot less likely to happen.

In the Netherlands they have got a device where you must insert your bank card, (think you must enter your pin as well) and then only do you get a OTP.

So SA banks are a major role player/ guilty party at this, it still does not take away the risk of losing your internet identity.

But if OP indicated how he/she got a sim swap done without proper verification there are to many loopholes in the system.
 
Last edited:
moklet said:
Yup that is more secure wonder why FNB stopped it. The risk would be many many times smaller as they literary have to get the device which is a lot less likely to happen.

In the Netherlands they have got a device where you must insert your bank card, (think you must enter your pin as well) and then only do you get a OTP.

So SA banks are a major role player/ guilty party at this, it still does not take away the risk of losing your internet identity.

But if OP indicated how he/she got a sim swap done without proper verification there are to many loopholes in the system.
Click to expand...

Where you have people ... you have loopholes. Always has been .... always will be.
 
Ockie said:
Where you have people ... you have loopholes. Always has been .... always will be.
Click to expand...

Clearly, but clearly those employees did not follow the rules, the systems should have some safety checks and if they did not follow the rules there should be a tracking system/paper trail which can pick up if staff skipped some processes/steps (Even if it was a legitimate swap, if they did not verify that the person was who he was there must be a system/process to pick it up.)
Staff guilty of this this should be warned/disciplined and finally fired.

There should be some back office checking if all documents are in order/processes have been followed. (Still can be to late if it was fraud, but staff will think twice for not following the correct process if their job is on the line.)
 
moklet said:
Clearly, but clearly those employees did not follow the rules, the systems should have some safety checks and if they did not follow the rules there should be a tracking system/paper trail which can pick up if staff skipped some processes/steps (Even if it was a legitimate swap, if they did not verify that the person was who he was there must be a system/process to pick it up.)
Staff guilty of this this should be warned/disciplined and finally fired.

There should be some back office checking if all documents are in order/processes have been followed. (Still can be to late if it was fraud, but staff will think twice for not following the correct process if their job is on the line.)
Click to expand...

There is paper work the to be signed. If the OP wants, he can report it to customer care for them to investigate the store. If they cant produce the paperwork then customer care can take appropriate action. It is up to the OP.
 
How much is a sim swap? need to do a swap to nano sim tomorrow, also what do i need? ID, proof of residence? anything else?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X