Re: "'Scammers stole £40k after EDF gave out my number"

On 14/03/2025 18:49, Theo wrote:

 Speculating, I would guess they started with the SIM swap.  I don't know the
O2 procedure, but it's possible to have SIMs which are unregistered or only
lightly registered (eg no online account).  In that case there isn't much
security information the operator has, or it could be easy to find out
(pet's name, place of birth, etc).  Scammer contacts the provider to say you
broke your SIM card and need a new one and they don't have very much to
authenticate you. 

  Is that SIM card in a phone which they can still see on their network?
If they can make that stick they can maybe then do a

password reset on the email which uses SMS as a recovery mechanism, and then
they're in.
 Theo