Why SMS OTP Fails Before the Hacker Even Tries Hard
The attack is called SIM swapping, and it does not require any technical skill. A criminal calls your mobile carrier, claims to be you, says the phone was lost, and asks for the number to be transferred to a new SIM. Indian telecom operators, Airtel, Jio, Vi, have all seen this exploit used against customers. Once the number moves, every SMS OTP for your bank, your UPI app, your email goes to the attacker's phone. You find out when your accounts are already empty.
