SIM swap fraud prevention

A system comprising:

• one or more computing devices of a carrier network configured to perform operations including:
• based at least in part on a subscriber identity module (SIM) swap request to replace a first SIM of a user equipment (UE) associated with a subscriber with a second SIM, storing, by a fraud detection system, first information associated with the first SIM;
• subsequent to an execution of a SIM swap to replace the first SIM with the second SIM, receiving, by the carrier network, an attach request from the UE with the second SIM;
• in response to the attach request and a usage of the UE operating with the second SIM, performing, by a fraud detection system, fraud detection on the SIM swap based at least in part on the first information associated with the first SIM stored based at least in part on the SIM swap request and based at least in part on second information associated with the second SIM, wherein an equipment identity register (EIR) of the carrier network detects the usage of the UE operating with the second SIM based at least in part on a first international mobile equipment identity (IMEI)/international mobile subscriber identity (IMSI) check received by the EIR with respect to the second SIM;
• and
• based at least in part on the SIM swap being detected as fraudulent by the fraud detection, causing, by a fraud detection system, the second SIM to be prohibited from operating with respect to the subscriber,
• wherein the fraud detection includes at least two of:
• comparing a first physical location of the first SIM with a second physical location of the second SIM;
• comparing a first access system connected to the first SIM with a second access system connected to the second SIM;
• and
• performing detection with respect to one or more of calls and text after the SIM swap for unusual patterns.

A non-transitory computer-readable media storing computer-executable instructions, which when executed by one or more processors, cause the one or more processors to perform operations comprising:

• based at least in part on a subscriber identity module (SIM) swap request to replace a first SIM of a user equipment (UE) associated with a subscriber with a second SIM, storing, by a fraud detection system, first information associated with the first SIM;
• subsequent to an execution of a SIM swap to replace the first SIM with the second SIM, receiving, by a carrier network associated with the UE, an attach request from the UE with the second SIM;
• in response to the attach request and a usage of the UE operating with the second SIM, performing, by the fraud detection system, fraud detection on the SIM swap based at least in part on the first information associated with the first SIM stored based at least in part on the SIM swap request and based at least in part on second information associated with the second SIM, wherein an equipment identity register (EIR) of the carrier network detects the usage of the UE operating with the second SIM based at least in part on a first international mobile equipment identity (IMEI)/international mobile subscriber identity (IMSI) check received by the EIR with respect to the second SIM;
• and
• based at least in part on the SIM swap being detected as fraudulent by the fraud detection, causing, by the fraud detection system, the second SIM to be prohibited from operating with respect to the subscriber,
• wherein the fraud detection includes at least two of:
• comparing a first physical location of the first SIM with a second physical location of the second SIM;
• comparing a first access system connected to the first SIM with a second access system connected to the second SIM;
• and
• performing detection with respect to one or more of calls and text after the SIM swap for unusual patterns.