PanicStation.org
UK USA
uk Technology & digital loss esim activation message • unexpected esim qr code • esim qr you did not request • sim swap text message • sim swap warning message • sim swap scam • simjacking alert • number hijack attempt • unauthorised sim change • unsolicited mobile activation • phone number taken over • mobile account takeover • porting request you didn't make • pac request text • sudden loss of signal • can't make calls suddenly • sms codes not arriving • otp texts stopped • fake carrier message • unknown qr code for esim

What to do if…
you receive an eSIM activation message or QR code you did not request

Short answer

Treat it as a possible SIM-swap attempt: do not scan the QR code, and contact your mobile network immediately using a trusted number to block any eSIM or number-transfer change.

Do not do these things

  • Don’t scan the QR code or follow links in the message “to cancel” or “verify”.
  • Don’t reply to the message, and don’t share any one-time passcodes (OTP), security codes, or account PINs with anyone who contacted you.
  • Don’t call back a number provided in the message. Use the number from your bill, your network’s official app, or your network’s official website.
  • Don’t assume it’s harmless just because your phone still has signal — act before service is taken over.
  • Don’t rush to factory-reset your phone. This rarely helps and can make recovery harder.

What to do now

  1. Pause the activation path immediately.
    Don’t scan the QR code, don’t tap any “set up eSIM” prompts, and don’t enter codes into any website/app linked from the message.

  2. Contact your mobile network right away (use another phone if you can).
    Say: “I received an eSIM activation/number transfer message I did not request. Please block any SIM/eSIM swap or number transfer and secure my account.”
    Ask for:

    • A block/freeze on SIM swaps and number transfers (the name varies by network).
    • A new account security PIN/password on the mobile account (not one you’ve used elsewhere).
    • Confirmation of whether any eSIM has been issued or any change is pending, and how it was requested (online / phone / store).
    • A reference number for the contact and a note added: “suspected unauthorised SIM/eSIM change”.

  3. Check whether your number is already being affected.
    Warning signs include: sudden loss of signal, “no service”, calls/texts failing, or OTP texts no longer arriving.
    If you’ve lost service, tell the network this may already be an active SIM swap and you need your number restored and the account locked down.

  4. Immediately secure accounts that rely on SMS codes — starting with your email.
    From a device/account you still control:

    • Change the password on your primary email account first.
    • Then change passwords for banking, payment apps, and any account that can reset other passwords (Apple ID/Google account, key social accounts).
    • Where possible, switch away from SMS two-factor codes to an authenticator app or passkey.

  5. Notify your bank(s) and payment providers if anything looks off.
    If you see unfamiliar login alerts, password resets you didn’t do, or unusual transactions, contact your bank’s fraud team and ask them to add extra verification and monitor/hold high-risk transfers.

  6. Report it if you believe it’s fraud or you’ve suffered loss.

    • If you’re in England, Wales or Northern Ireland, report via Report Fraud (Action Fraud) so you have a reference for banks/providers.
    • If you’re elsewhere in the UK, use your local police reporting route if needed.

  7. If your provider is slow, escalate inside the provider immediately.
    Ask for their fraud/security team. Keep a simple timeline: time the message arrived, what it said, what you did, and what service changes you noticed.

What can wait

  • You don’t need to decide today whether to change mobile networks, change your phone, or change your number.
  • You don’t need to do a full device wipe or reinstall apps right now.
  • You don’t need to confront the sender — focus on locking the number and securing key accounts first.

Important reassurance

These messages are designed to rush you into scanning or “verifying.” Often it’s still preventable if you avoid the QR/link, get the provider to lock the account, and secure your email and financial access quickly.

Scope note

This is first-steps guidance to stabilise the situation and reduce immediate risk. If money was taken or accounts were accessed, you may need follow-up support from your bank, your mobile provider’s fraud team, and formal reports to support disputes.

Important note

This is general information, not legal, financial, or technical advice. Names for “SIM swap/transfer locks” vary by mobile network. If you feel overwhelmed, use a trusted friend’s phone to contact your network and bank and take it one call at a time.

Additional Resources
Support us