PanicStation.org
UK USA
us Technology & digital loss

What to do if…
you get an unexpected carrier alert that call forwarding was enabled

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Treat this as a possible phone-number takeover. Contact your wireless carrier immediately through its official app, website, or the number on your bill, and ask them to remove all call forwarding and secure the account before you rely on calls or texts for verification.

Do not do these things

  • Do not dial “repair codes” or “cancellation codes” given by an unexpected caller, text, or voicemail.
  • Do not click links in the alert message; open your carrier’s official app or type the carrier’s web address yourself.
  • Do not share one-time codes, your account PIN, your port-out PIN, or security answers with anyone who contacts you first.
  • Do not assume turning off call forwarding in your phone settings is enough, because forwarding may have been set at the carrier or network level.
  • Do not keep using SMS or phone-call codes for important accounts until your carrier confirms the forwarding is removed.

What to do now

  1. Contact your carrier through a trusted route.
    Use the official carrier app, the number on your bill, or the carrier’s official website. Ask for the fraud, security, or account-takeover team.

  2. Ask the carrier to remove call forwarding at network level.
    Ask what type of call forwarding was enabled, when it was enabled, and whether it was set through the account, the network, or a device. Ask them to remove all call forwarding on the line.

  3. Ask the carrier to check for account changes.
    Ask whether there were recent SIM swaps, eSIM activations, device changes, port-out requests, new lines, added authorized users, address changes, email changes, password resets, or billing changes.

  4. Lock down the carrier account.
    Reset the account password and account PIN or passcode. Ask what stronger protections are available for your line, such as a port-out PIN, number lock, port lock, SIM-change lock, or extra in-person verification, if your carrier offers them.

  5. Secure voicemail.
    Change the voicemail PIN. Ask the carrier whether remote voicemail access is enabled, whether a PIN is required, and whether voicemail was reset or accessed recently.

  6. Secure the accounts that rely on this phone number.
    Start with your primary email account. Change its password, review recent sign-ins, sign out unknown sessions, and check for new forwarding rules, filters, recovery emails, recovery phone numbers, or devices you do not recognize.

  7. Move the most important accounts away from SMS codes when you can do it safely.
    For banking, payment apps, Apple ID, Google, and other key accounts, save backup codes first and confirm your recovery options. Then switch from SMS or phone-call codes to an authenticator app, passkey, or security key where available.

  8. Do a short damage check.
    Review bank and credit card activity, payment apps, mobile wallet activity, app-store purchases, email security alerts, and your carrier account for new lines, devices, charges, or profile changes.

  9. Create a simple incident log.
    Write down the alert date and time, what the carrier confirmed, ticket numbers, names or departments you spoke with, and the accounts you checked. Keep screenshots of the carrier alert and any account warnings.

  10. Use official recovery routes if fraud or identity theft may have happened.
    If you see unauthorized transactions, account lockouts, new accounts, or misuse of your personal information, use IdentityTheft.gov for recovery steps. If the carrier will not correct or explain the issue, consider filing a consumer complaint with the FCC.

What can wait

  • You do not need to work out who did it right now.
  • You do not need to reset every password immediately; handle the carrier account, voicemail, primary email, and financial accounts first.
  • You do not need to decide today whether this was SIM swap fraud, port-out fraud, voicemail compromise, or a carrier error.
  • You do not need to contact local law enforcement right now unless there is confirmed loss, ongoing impersonation, or another urgent safety concern.

Important reassurance

A surprise call-forwarding alert is unsettling, but the first steps are clear: stop the forwarding, secure the carrier account, secure voicemail, and protect the accounts that depend on your phone number.

Scope note

These are first steps only, focused on stopping possible interception and reducing immediate damage. Later decisions about account recovery, credit protection, disputes, or complaints may need help from your carrier, financial institutions, or another specialist.

Important note

This is general information, not legal, financial, technical, cybersecurity, or professional advice. Use official carrier, bank, government, and account-provider channels for decisions about your specific situation.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us