Ken Uchikura Newsletter Vol. 357 Thumbnail
Is Authentication via SMS (Text Message) Really Secure?
People might assume that SMS (Short Message Service) authentication from mobile carriers is secure. Unlike internet-based messaging apps like LINE or WhatsApp, SMS relies on traditional telephone networks that transmit via a system called SS7 (Signaling System No. 7).
While this may seem secure at first glance, there are risks associated with SMS-based authentication. The main risks consist of:
Phone Number Takeover
An attacker may fraudulently contact the mobile carrier, impersonate the user, and transfer the phone number to another device.
SIM Swap Attack (SIM Card Re-issuance)
In this method, an attacker makes a false request to the mobile carrier to issue a new SIM card and transfers the victim’s phone number to their own SIM.
If this happens to you, the attacker can steal the authentication codes for your bank accounts or email services, putting your accounts at risk of fraud or unauthorized use.
In particular, if your phone suddenly stops receiving calls, you cannot make calls, or you stop receiving text messages, be cautious. These may be signs that you have been a victim of a takeover or SIM swap. The easiest way to check is to ask someone to call or text your number.
If you encounter any issues, you should contact your mobile phone provider immediately.
- In Japan: Docomo, au, SoftBank, Rakuten
- In the U.S.: Verizon, T-Mobile, AT&T
All of these carriers can take protective measures to secure your line after verifying your identity.
Kenichi Uchikura
President / CEO
Pacific Software Publishing, Inc.
ken.uchikura＠pspinc.com
Twitter | Facebook | Linked In
__..-･**･-..__..-･**･-..__..-･**･-..__..-･**･-..__
ABOUT PSPINC
PSPINC (Pacific Software Publishing, Inc.) is a technology company based in Bellevue, Washington, USA. Founded in 1987, PSPINC provides web hosting, email hosting, and other internet-related services to businesses and individuals worldwide.
In addition to its hosting services, PSPINC also offers website design and development, domain registration, and online marketing services. The company has data centers located in the United States and Japan, and it offers multilingual support to its customers.
PSPINC has a strong focus on customer service, and it has received numerous awards and accolades for its quality of service over the years. The company is committed to staying up-to-date with the latest technology and industry trends in order to provide the best possible solutions for its customers.
__..-･**･-..__..-･**･-..__..-･**･-..__..-･**･-..__