What to do if…
you see a “port-out” or “number transfer” confirmation email you did not start
Short answer
Call your mobile carrier immediately (using the number from the carrier’s official website/app) and say it’s an unauthorized port-out/number transfer—ask them to cancel it and enable a port/number-transfer lock on your account.
Do not do these things
- Don’t click links, open attachments, or call numbers shown in the email.
- Don’t assume it will “fail on its own” and wait—ports can complete fast.
- Don’t use SMS text codes to reset important passwords right now (they may be intercepted if the transfer goes through).
- Don’t trust unexpected “carrier support” or “bank security” calls/texts that show up right after this—hang up and call back using an official number/app you choose.
What to do now
-
Call your carrier and ask for the porting/number-transfer (or fraud) team.
Say: “I received a number transfer/port-out confirmation I did not request. This is unauthorized. Please stop/cancel the port and secure my account.”
Ask them to:- Cancel/stop any pending port-out
- Enable Number Transfer Protection / Port Lock / Port Freeze (carrier naming varies)
- Reset your account PIN/passcode and remove any unfamiliar emails/phone numbers on the account
- Confirm whether the request is pending or completed, and when it was initiated
- Provide a case/reference number
-
Check whether you’ve lost service.
If your phone shows “No Service,” can’t send texts, or calls fail, tell the carrier you may already be ported and need your number restored urgently. -
Secure your email account immediately (before everything else).
- Change your email password from a trusted device.
- Turn on two-factor authentication using an authenticator app or security key (not SMS if you can).
- Remove unknown forwarding, filters/rules, or recovery options.
-
Call your bank(s) and payment apps and warn them your phone number may be compromised.
Ask them to add extra verification and watch for attempted logins or transfers. If you see suspicious transactions, use their fraud process right away. -
Lock down accounts tied to your phone number.
Prioritize: email, banking, Apple ID/Google account, your carrier online account, and messaging apps that can be re-registered to a number.- Change passwords.
- Replace SMS-based 2FA with app-based 2FA or security keys where possible.
-
Create a minimal evidence trail.
Save the email, note the time received, and write down carrier case numbers and the dates/times you spoke to support. -
Add identity-theft protections if the port completed or accounts/money were targeted.
- File a police report if your number was taken over, accounts were accessed, or money was stolen.
- Place a fraud alert or freeze your credit with the major credit bureaus if you’re worried about new-account fraud.
- Consider reporting through the FTC identity theft channel if you’re dealing with broader identity misuse.
- You can also file an FCC complaint about port-out fraud, especially if you’re not getting traction with the carrier.
What can wait
- You don’t need to diagnose how the attacker got your information right now.
- You don’t need to contact every account today—focus on carrier, email, and money-related accounts first.
- You don’t need to decide whether to change your number today; regain control and stabilize first.
Important reassurance
Seeing this message is a legitimate reason to act quickly. Many cases are stopped if you reach your carrier fast and secure email and financial accounts right away.
Scope note
These are first steps to stop a takeover and reduce immediate harm. After you’re stable, you can do a fuller audit (devices, recovery options, and account security) with more time and support.
Important note
This is general information, not legal advice. Carrier tools and names vary. If the first representative can’t help, ask to be escalated to the porting/number-transfer support team and request a case number.