Your carrier: SIM swaps, eSIM and locking down your number
This page covers Spanish mobile carriers; the carriers and the exact process are specific to Spain, though the ideas apply anywhere. Your number isn't just for calls: it's the SMS channel for your bank, for WhatsApp, and for a lot of people, the recovery phone for their email. Whoever controls your SIM controls part of all that.
Short version: losing your phone doesn't always mean losing your number: you can request a replacement SIM. The real risk is the opposite, SIM swapping: someone else getting that replacement by pretending to be you. Every carrier requires proving you're the account holder, but the channel and exactly what they ask for varies and changes over time.
Why your number is critical
Every time a service sends you a code by SMS (your bank, your Google or Apple recovery phone, WhatsApp registration), that code reaches whoever has the active SIM with your number at that moment. If you lose control of the SIM, whether because your phone is stolen or because someone duplicates it without your permission, they inherit that channel.
This turns your number into what we call on this site a single point of failure: one single piece that, if it fails, drags down several unrelated accounts at once, even though those accounts have nothing to do with each other. It's not a failure of your bank or of Google: it's that all of them, independently, decided to trust the same channel.
What your carrier asks for to issue a replacement SIM
Every carrier in Spain requires proving you're the line's account holder before handing over a replacement SIM, precisely to stop SIM swapping. What changes from one to another is the channel (physical store, phone, app) and whether it's resolved on the spot or takes a day or two. Since this changes often and each carrier publishes it (or doesn't) in its own help pages, the safe move is checking directly on your carrier's website before you need it, not trusting a figure you read a while ago.
| Carrier | What to check in their official help |
|---|---|
| Movistar | Line blocking for theft and the SIM replacement process |
| Vodafone | SIM replacement for loss, theft or damage |
| Orange | SIM replacement and available channel (store or phone) |
| Digi | SIM replacement and line blocking |
| MásMóvil / Yoigo | SIM replacement in their own stores |
| O2 | SIM replacement by phone |
| Lowi | SIM replacement through the app or by phone |
In every case, the principle published by data-protection and consumer authorities is the same: the carrier has to verify your identity as the account holder before moving your number to a new SIM. If any channel asks you only for the phone number and nothing else to issue the replacement, that's a red flag, not a convenience.
This is exactly what SIM swapping exploits: someone pretends to be you with your carrier, using personal data gathered beforehand through another route (phishing, data breaches, social media), and requests the replacement in your place. The more of your personal information is floating around out there, the easier you make it for someone attempting this kind of scam.
The extra protection: the SIM PIN
Apart from the process with your carrier, your own SIM has a PIN you can turn on from your phone: without it, a stolen physical SIM is useless in another device without that code (and, if entered wrong too many times, it asks for the PUK code). It's a different layer from the one your carrier manages, and you control it.
This is especially relevant if your entire phone gets stolen, not just the SIM: whoever has it can take out the card and try it in another device before you get a chance to call your carrier. The SIM PIN cuts off that path on the spot, without depending on you reacting quickly. If you also have an eSIM instead of a physical card, that specific risk of "pulling the card and putting it in another phone" doesn't exist, although other risks appear: an eSIM is transferred or reactivated a different way, and it's worth knowing how before you need it.
What to check today
- Do you know what phone number your carrier uses to block the line for theft?
- Do you have the SIM PIN turned on?
- Do you know whether your carrier requires being physically present for a replacement, or handles it by phone?
- How many critical services (bank, email, WhatsApp) get codes only by SMS to this number?
- If you have a prepaid plan, do you know what happens to your number if you don't top it up for a while?
If your phone has already been stolen or you notice odd activity on the line
Call your carrier right away to block the line and request a replacement SIM; all of them have an urgent channel for this. If you notice your phone suddenly losing coverage for no reason (a classic sign of SIM swapping in progress), it's time to call, not to wait and see if it fixes itself. Check your WhatsApp too, and any account that uses this number as a second factor or for recovery.
If what happened is the theft of the entire phone, there are two separate calls that are equally urgent: one to your carrier, for the SIM, and another to the police to report the theft of the device. The report also serves as backup if an institution later asks you to prove the phone was no longer in your possession when something was done with it.
Official help by carrier (verify current cost and channel; Spanish-language): Movistar · Vodafone · Orange · Digi · MásMóvil · Yoigo · O2 · Lowi