Phone stolen in metro crowd, Rs 57,000 lost within an hour; SIM card used to take money from bank accounts without unlocking the device

A phone worth Rs 60,000 was reportedly stolen in a crowded metro station. Within 45 minutes, Rs 57,000 had allegedly disappeared from the owner's bank account, even though the phone had Face ID and a strong screen-lock PIN.

In an October 18 post on X, Rakesh Patidar described the incident and warned that thieves could misuse a stolen SIM card without unlocking the original device. The post explains a possible sequence involving a basic feature phone, the *99# banking service and a UPI PIN reset. The specific incident and the alleged method have not been independently verified.

How does the alleged SIM card fraud work?

According to the post, the sequence unfolds in several steps.

1. A phone gets stolen in a crowd. The thief takes the device even though its owner has enabled Face ID and a screen-lock PIN.
2. The thief removes the SIM card. Instead of trying to unlock the stolen smartphone, the person takes out its SIM.
3. The SIM goes into a basic phone. The post claims the thief inserts it into a feature phone that can make calls and use cellular services.
4. The person dials *99#. This opens a USSD-based banking service that works without mobile internet. The National Payments Corporation of India (NPCI) lists services including fund transfers, balance enquiries and UPI PIN setting or changing. National Payments Corporation of India+1
5. The post alleges an attempt to reset banking credentials. It claims the person uses access to the SIM to receive an OTP and attempts to reset the UPI PIN before taking money from the bank account.

However, a SIM card alone does not automatically give someone access to a bank account. UPI PIN resets and transactions involve additional authentication requirements. NPCI's guidance for resetting a UPI PIN includes debit card details and OTP verification. The exact process described in the post should therefore not be treated as a confirmed method of bypassing banking security.

Why can a screen lock fail to protect a SIM?

A screen lock protects access to a phone's contents, apps and settings. It does not physically prevent someone from removing the SIM card.

If the SIM remains usable in another device, the person holding it may be able to receive calls and text messages sent to that number. That can create risks for services that rely on the number for verification or account recovery.

A SIM PIN adds another layer of protection by requiring a code before the SIM can be used after certain events, such as restarting a phone or inserting the SIM into another device.

How can Android users lock their SIM cards?

On Android phones, the exact menu varies by manufacturer and software version.

• Open Settings.
• Search for SIM card lock or look under Security and SIM settings.
• Select the relevant SIM and enable the SIM lock option.
• Enter the correct existing SIM PIN when prompted.

The post mentions 1234 and 0000 as possible default PINs. Do not assume either code applies to your SIM. Apple also advises users to check with their network provider if they do not know the default SIM PIN.

Apple Support (IN)

How can iPhone users enable SIM PIN?

On an iPhone, follow these steps.

• Open Settings.
• Tap Cellular or Mobile Data.
• Select SIM PIN.
• Turn on the option and follow the instructions.

If you do not know the existing PIN, contact your mobile operator before entering a code. Guessing can lock the SIM.

What happens after three incorrect SIM PIN attempts?

Stop guessing after an incorrect attempt if you are unsure of the code. Most SIMs allow three incorrect SIM PIN entries before requiring a Personal Unblocking Key, commonly called a PUK.

Contact your mobile operator to obtain the correct PUK. Entering the wrong PUK repeatedly, often 10 times, can permanently block the SIM, depending on the operator and SIM. You may then need a replacement SIM.

What should you do if your phone is stolen?

• Contact your mobile operator immediately and block the SIM.
• Inform your bank and ask it to secure mobile banking access.
• Report unauthorised transactions to your bank as soon as possible.
• Block the stolen device through the relevant official service and file a police complaint.
• Change passwords where necessary and review recent bank transactions.
• Never share OTPs, UPI PINs or banking passwords with anyone claiming to help.

A screen lock remains important, but securing the SIM adds another layer of protection. Acting quickly after a phone theft can help reduce the risk of further misuse.

(Disclaimer: This article is based on a viral social media post and online reactions. The Economic Times cannot independently verify the authenticity of the content and does not claim or endorse it.)​​