PanicStation.org
UK USA
us Technology & digital loss esim activation message • unexpected esim qr code • esim qr you did not request • sim swap text message • sim swapping attack • sim swap scam • simjacking alert • phone number hijack • unauthorized sim change • carrier account takeover • number transfer attempt • port out scam • sudden no service • phone lost signal suddenly • sms codes not arriving • otp texts stopped • fake carrier notification • qr code activation scam • mobile line takeover • wireless account fraud

What to do if…
you receive an eSIM activation message or QR code you did not request

Short answer

Assume a SIM-swap attempt: do not scan the QR code, and call your wireless carrier immediately (using a trusted number) to stop any eSIM activation or number transfer and lock the account.

Do not do these things

  • Don’t scan the QR code, click “cancel/verify” links, or install any “carrier security” app from the message.
  • Don’t reply to the text/email, and don’t share verification codes, one-time passcodes, or your account PIN with anyone who contacted you.
  • Don’t call a phone number shown in the message. Use your carrier’s official app, your monthly bill, or your carrier’s official website contact page.
  • Don’t reset your phone as your first move. It usually doesn’t stop a number takeover and can slow you down.

What to do now

  1. Stop the activation path immediately.
    Don’t scan the QR code and don’t proceed with any “Add eSIM” prompts tied to that message.

  2. Call your carrier right away and ask for fraud/account security.
    Say: “I received an eSIM activation / SIM change message I did not request. I need you to block it and secure my wireless account.”
    Ask specifically for:

    • A Number Transfer Lock / port-out lock (name varies by carrier) to prevent transferring your number.
    • A requirement for an account PIN/passcode for any SIM/eSIM change.
    • Confirmation whether an eSIM was issued and whether any SIM change or port-out is pending.
    • A case number and a note added: “suspected unauthorized SIM/eSIM change”.

  3. Check if takeover may already be affecting service.
    If you suddenly have “No Service,” can’t call/text, or OTP texts stopped arriving, tell the carrier your disruption may be a SIM swap in progress and you need your line secured and service restored.

  4. Secure your most important accounts, starting with email.
    From a device you still control:

    • Change the password on your primary email account first.
    • Then change passwords on banking/payment apps and your Apple ID/Google account (anything that can reset other passwords).
    • Where possible, switch from SMS-based 2FA to an authenticator app or passkey.

  5. Notify your bank(s) and payment providers if anything looks wrong.
    If you see unfamiliar login alerts, password resets you didn’t initiate, or suspicious transactions, call the fraud number on your card/app and ask them to add extra verification and watch/hold high-risk transfers.

  6. Report the incident (especially if you lost money or access).

    • File a report with the FTC.
    • File a complaint with the FBI’s Internet Crime Complaint Center (IC3) if you believe you’re a victim of fraud, had accounts taken over, or lost money.

  7. Write down a short timeline while it’s fresh.
    Time received, exact wording (screenshots), any service loss, which accounts sent security alerts, who you spoke to at the carrier/bank, and case numbers.

What can wait

  • You don’t need to decide right now whether to change carriers or change your phone number.
  • You don’t need to publicly post warnings or confront the sender.
  • You don’t need to do a full device wipe unless a trusted support channel tells you there’s a separate device compromise.

Important reassurance

This kind of message is designed to rush you into scanning or “verifying.” Many attempts can be stopped if you avoid the QR/link, get the carrier to lock the line, and secure email and financial accounts quickly.

Scope note

This is first-steps guidance to stabilize the situation. If accounts were accessed or money was taken, you may need follow-up steps with your carrier’s fraud team, your bank(s), and formal reports to support disputes and recovery.

Important note

This is general information, not legal or financial advice. Carrier security features and names (for example “Number Transfer Lock”) vary by provider and plan. If you feel overwhelmed, focus on two calls: your carrier first, then your bank.

Additional Resources
Support us