tech
diciembre 26, 2025
¿Qué es SIM swap? Pilas con el nuevo fraude que acecha a usuarios de Bre-B
El despliegue de Bre-B en Colombia, el sistema de pagos inmediatos que permite transferencias en tiempo real usando “llaves”, llegó este año con la pr...
TL;DR
- SIM swap fraud allows criminals to gain control of a phone line to intercept SMS verification codes and divert payments in real-time systems.
- This attack leverages the structural weakness of SMS, which was not designed with modern cybersecurity standards but is still widely used for financial authentication.
- Criminals can achieve SIM swaps by bribing telecom employees or compromising the operator's infrastructure with malware.
- Once a line is hijacked, attackers can register the number as a payment key in systems like Brazil's Pix or Colombia's Bre-B, redirecting funds to accounts controlled by criminals.
- Solutions implemented in other regions, like Mozambique, involved coordinated actions between banks and operators to adopt additional controls, significantly reducing cases.
- Experts recommend eliminating SMS as an authentication factor or at least combining it with other channels like email for stronger two-factor authentication.
- The article places significant responsibility on telecom operators, stating it's unacceptable for them not to know which employee made system changes by 2025.