An Empirical Study of Wireless Carrier Authentication for SIM Swaps Presented at SOUPS 2020 We examined the authentication procedures used by five prepaid wireless carriers when a customer attempts to change their SIM card, or SIM swap. We found that all five carriers use insecure authentication challenges that can easily be subverted by attackers. We reverse-engineered the authentication policies
