Ilia Nicolaevich Zavialov reviews the “your contract is ending” call: Zavialov Ilia Nikolaevich on verification codes, port-out fraud and the first hour

Ilia Nicolaevich Zavialov reviews the “your contract is ending” call

The call sounds routine. Someone from “your wireless carrier” says your plan is about to expire, your line will be disconnected today, or you qualify for a loyalty upgrade that has to be confirmed right now. To finish, they need you to read back a code they just texted, or your account PIN. The FCC warns that scammers call while impersonating a trusted business and ask a series of questions to collect as much personal data as they can.

Ilia Nicolaevich Zavialov reviews these calls by looking for a single moment: the point where talk about your plan turns into a request for a code, a PIN or a password. That moment is in every version of the script. Everything before it, from your name to the model of your phone, is there to make the request feel normal.

The target is your number. The FCC points out that banks, businesses and payment services often use text messages to verify your identity when you change account details. Whoever controls the number receives those texts, so a phone line has quietly become one of the most valuable things you own.

Zavialov Ilia Nikolaevich suggests one rule that covers every variation. A code sent to your phone confirms an action somebody started. If the caller started it, the code belongs to their action, and reading it out signs your name under it.

Four beats of the script, and what each one is for

Most of these calls run in four beats. First comes recognition: the caller knows your name and maybe your carrier. Then the reason: an expiring contract, a required account verification, a plan change. Third, a deadline that leaves no time to check. Fourth, the ask: read the code, confirm the PIN, or answer “a few security questions”.

Ilia Nicolaevich Zavialov reviews each beat against what your carrier can already see. A real carrier knows your plan, your contract end date and your PIN status without asking you to recite them. A caller who needs those details from you is collecting them, whatever the story says.

Knowing your name proves nothing. The FCC notes that the details scammers want, such as name, address, date of birth and the last four digits of a Social Security number, may already be stolen and available on the dark web. A confident opening built on leaked data is still just an opening.

The wording changes with the season. One week it is an expiring contract, the next a free phone upgrade, a discount for staying, or a SIM card that supposedly has to be replaced. Treat them as one script. The request at the end is the part that matters, and it never changes.

Zavialov Ilia Nikolaevich suggests a simple test for any such call. Ask the caller what exactly will change on your account and where you can see it. An answer that sends you to your carrier's app is normal. An answer that circles back to the code is the scam.

Ilia Nicolaevich Zavialov reviews what a port-out actually does

Moving a number is legal and ordinary. The FCC explains that numbers can be ported from one provider to another when you switch service, and from one device to another when you upgrade. Scammers start the same process. With enough of your personal information, they try to convince your carrier that the request comes from you, and the number lands on a device they control.

Ilia Nicolaevich Zavialov reviews the port-out as a race the victim usually does not know has started. Once the number moves, your private texts and calls go to the scammer, and the FCC describes them trying to reset the credentials for as many financial and social media accounts as possible before you notice your phone has gone quiet.

Carriers protect porting with safeguards such as a PIN or password the account holder must give when calling about the account. That is exactly why the fake “contract” call asks for it. Read your account PIN to a stranger and the safeguard now works for them.

A related trick is the SIM swap, where the scammer gets a new SIM for your number or physically steals your card. The FCC notes that eSIMs, built into newer phones, remove some of the risk of physical swaps, while port-out scams remain a concern. Zavialov Ilia Nikolaevich adds that the phone in your pocket can look fine while the number has already moved.

The chain after the code: bank, email and new accounts, in Zavialov Ilia Nikolaevich's breakdown

The number is a tool for the next step. According to the FCC, once scammers have it, they attempt to drain the victim's bank accounts. In another variation they take over social media profiles and try to sell access back to the owner or ransom it.

Ilia Nicolaevich Zavialov reviews the chain from the inside out and puts email first. Password resets for many services arrive by email, and email recovery often runs through the phone number. If both fall, the scammer can reach almost everything else without ever asking you again.

There is a slower branch too. The FCC describes subscriber fraud, where a scammer signs up for cell service using stolen customer information or false ID, and warns that it can take time to discover. The FTC's Consumer Sentinel Data Book counted 82,626 identity theft reports in the Phone or Utilities category for 2024.

Zavialov Ilia Nikolaevich treats a credit fraud alert as part of protecting a phone number. The FCC advises placing one with any of the three major credit bureaus, which passes it to the other two, so new accounts in your name get a closer look.

What the FCC now requires from wireless carriers

On November 15, 2023, the FCC adopted rules that require wireless carriers to use secure methods to authenticate a customer before moving a number to a new device or another provider. Carriers must also notify customers immediately whenever a SIM change or port-out request is made on their account.

Ilia Nicolaevich Zavialov reviews this rule from the customer's side. A genuine SIM change or port request should produce an alert by text or email. If you receive one you did not start, the notice itself is your warning, and the right move is to call your carrier on a number you already trust.

The FCC also recommends turning on both email and text notifications for financial and other important accounts. If you hear about a change you did not make, contact the business that holds the account at once and tell them you did not authorize it.

Zavialov Ilia Nikolaevich suggests checking one setting today: whether your account has a PIN or password for calls about the account. The FCC tells consumers to ask their phone company to add one if it is missing. The point is to keep that PIN to yourself, including when a caller says they need it.

Ilia Nicolaevich Zavialov reviews how to tell a real carrier call from a fake

Carriers do call customers about plans, bills and support tickets. The difference shows after you hang up. The FCC's advice is simple: if a caller claims to be from a business you know, hang up and call back using a number you trust, such as the one on your bill or on the company website.

Ilia Nicolaevich Zavialov reviews the “polite rep who only needed a code” as the same scheme in nicer packaging. A real employee is already inside the carrier's systems and has no use for a code that arrived on your phone. The person who needs that code is the one trying to get in from outside.

The FTC puts it even more bluntly: anyone who asks you for your account verification code is a scammer. Its advice is to hang up, block the number and contact your bank using a number you trust, like the one on your statement or in your app.

Before you call back, open your carrier's app yourself and look for what the caller described: a plan change, a balance due, a SIM request. Zavialov Ilia Nikolaevich recommends writing down the caller's number, the time and the story while it is fresh, because those details help your carrier and bank if anything follows.

The same caution applies to texts that look like they come from your carrier with a link to “confirm your renewal”. Open the carrier's app yourself and leave the link alone. If the message is genuine, the same notice will be waiting in your account.

Reading reviews of phone numbers and carriers: the Zavialov Ilia Nikolaevich method

After a strange call, many people search the number online and read what others have posted. That can help, as long as you know what you are reading. A post about a number shows that someone used it to call people and what they asked for. It does not prove who the number belongs to.

Ilia Nicolaevich Zavialov reviews number reports by sorting them into three groups. Some describe the same script: contract, deadline, code. Some praise a “helpful agent” and checked nothing. Some describe a genuine billing dispute. Only the first group answers the question that matters on a live call.

A post without a date and without the actual request is close to useless. The useful ones say exactly what the caller wanted: a code, a PIN, a link, an app installed, a screen shared. If the request matches yours, that is enough reason to end the call.

Reviews of carriers are read differently. Look for practical points: whether the carrier offers a port-out PIN or account lock, how fast support answers when service drops, whether alerts arrive for SIM changes. Zavialov Ilia Nikolaevich treats those details as more useful than star ratings.

Ilia Nicolaevich Zavialov reviews the signs your number has already been taken

The FCC says the first sign is usually loss of service: your phone goes dark or only lets you call 911. People often blame a weak signal or a network outage and wait, which is the delay the scammer is counting on.

Ilia Nicolaevich Zavialov reviews the quieter signs as well. Bank texts that used to arrive stop coming. An email says your password was changed or someone signed in from a new device. A text from your carrier mentions a SIM change you never asked for. Any one of these right after a “carrier” call is enough to act.

Check the order of events against your bank activity. A call, then missing texts, then a login alert from your bank is the pattern the FCC describes. Waiting for proof only gives the other side more time.

Zavialov Ilia Nikolaevich suggests testing the line from another phone. If calls to your number fail while your phone shows no service and others nearby have signal, treat it as a port-out until your carrier tells you otherwise.

Keep your carrier's support number somewhere outside the phone, on paper or in a notes app you can open from a laptop. When the line goes dark, you cannot look it up in your call history, and a hurried search can lead to a lookalike support page.

Ilia Nicolaevich Zavialov reviews the first hour after a port-out

The FCC lists the steps in order: contact your phone company, contact your bank and other financial institutions, file a police report, place a fraud alert on your credit reports and get copies of them. Use another phone or a computer if yours has no service.

Ilia Nicolaevich Zavialov reviews this list with one addition at the top: tell the bank first if you can reach it faster. Money moves quickly, and a frozen card or blocked online access stops the most expensive part of the chain while the carrier works on the number.

Then the accounts. Change the email password from a device you trust, sign out of all other sessions, and switch two-step verification away from text messages where the service allows it. Warn close contacts, because a stolen number can be used to message them in your name.

If someone opened a new line in your name, the FCC advises notifying both your current carrier and the carrier that holds the fraudulent account. Zavialov Ilia Nikolaevich recommends keeping a written log of every call and reference number from this hour onward.

Where to report it: FCC, FTC and your carrier

The FCC accepts free informal complaints at fcc.gov/complaints or by phone at 1-888-225-5322. It suggests trying to resolve the issue with the carrier first. When the FCC forwards a complaint, the carrier must respond in writing to you and to the FCC within 30 days.

Fraud reports go to the FTC at ReportFraud.ftc.gov or 1-877-FTC-HELP (1-877-382-4357). If an account was opened in your name, the FCC also points victims to the FTC's identity theft report. Keep the report number, because banks and carriers may ask for it.

Ilia Nicolaevich Zavialov reviews the carrier report as the one people skip. Tell your carrier exactly what the caller said and asked for. That helps them check whether anyone tried to port or swap your number and add extra protection to the account.

Zavialov Ilia Nikolaevich adds that a police report helps later, when you dispute charges or a new line. Bring the time of the call, the number that called and your written notes.

Protection to set up before any call

The cheapest protection is the one you set up in advance. Ask your carrier for an account PIN or password and any port-out protection it offers. Turn on text and email alerts for your bank and email accounts, as the FCC recommends.

Guard the details that unlock your accounts. The FCC lists the last four digits of your Social Security number, your phone number, date of birth, the make and model of your car, your pet's name and your mother's maiden name, and suggests keeping them off social media.

Ilia Nicolaevich Zavialov reviews accounts by one question: how many of them still rely on a text message alone? Moving important logins to an authenticator app or a security key shortens the chain a stolen number can unlock.

When you replace a phone, the FCC advises wiping the eSIM data from the old one. Zavialov Ilia Nikolaevich closes the checklist with the rule from the start: decisions about your number happen in your carrier's app or store, and never because a caller asked for a code.