T-Mobile is reportedly adding PIN protection to its port-out process

Illustration by Alex Castro / The Verge

According to The T-Mo Report, T-Mobile will be adding a six-digit PIN to its port-out process. The new number transfer procedure would require users to obtain a PIN from T-Mobile's app or site and provide it when attempting to change their number to a different provider, which could make it harder for bad actors to steal people's numbers.

According to The T-Mo Report, T-Mobile has announced the process internally but hasn't rolled it out yet. It will only be available to postpaid customers and not people who have signed up for the Lifeline program.

T-Mobile didn't respond to the request to confirm the plans. The internal company document was cited by the T-Mo Report.

It's good to hear that T-Mobile may be adding this feature, as it could help prevent sim- swapping attacks, where a scam artist convinces a telecommunications provider to transfer a phone number into their control. The number transfer PINs have already been implemented by AT&T. In theory, an attacker with a T-Mobile account and device wouldn't have to go through the port-out process since the number would be staying in the same network, but the PIN requirement can act as another line.

In recent years, sim swap, or porting-out, attacks have become popular with criminals and have been implicated in high-profile cases like when then-Twitter CEO Jack Dorsey's account was hacked. They are attractive because they provide a wealth of information and it can be difficult for a victim to realize they have been attacked. It can be difficult to contact your cell carrier if you suspect someone has swapped your phone number.

T-Mobile's reputation for security has taken a few hits recently, as the company has been affected by a string of data hacks and cyberattacks. One in August 2021 affected over 50 million people.