Protection measures were credited by T-Mobile with a decline of more than 99% in successful customer SIM-swap attacks since 2022; attempted intrusions, measured separately, increased 37% over a recent 12-month span.
T-Mobile pointed to identity checks, SIM Protection and Port-Out Protection among steps it said helped reduce successful swaps. It also reported more than 99% fewer employee credential compromises linked to phishing.
A SIM swap redirects calls and texts by moving a customer's number onto a SIM card or eSIM held by someone else. T-Mobile tracked attempted intrusions, credential-based attempts and successful customer SIM-swap attacks as separate measures. A recent 12-month comparison showed a 35% reduction in credential-based attempts and a 37% increase in attempted intrusions; successful customer SIM-swap attacks have declined more than 99% since 2022. The figures cover different kinds of activity.
T-Mobile said phishing-resistant FIDO2 hardware keys now provide passwordless access for nearly 100% of its workforce. Before credentials are issued, employees confirm their identities with a selfie and government-issued ID.
A hybrid zero-trust platform was deployed across T-Mobile's workforce over six months, the carrier said. It reported that the platform has blocked more than six million online threats since launch, but did not say when the tally began.
For 2025, T-Mobile said it stopped nearly three billion scam and spam texts before they reached recipients. It also reported seeing nearly 50% more scam and spam messages in 2025 than in 2024. The carrier said its security figures draw on internal data and its safeguards cannot prevent every threat or incident.
