Numbers, Porting & Regulatory
Port-Out Protection
By Myroslav Orshak · operates licensed carrier infrastructure · Updated September 2026
Port-out protection is a security lock on your phone account — typically a PIN or passcode required before any number can be transferred away — that prevents criminals from moving your phone number to a device they control.
How it works
The same rules that let you take your number to a better provider can be abused: a criminal with your name, address, and account number can file a port request pretending to be you. If it succeeds, your phone goes dead and their phone starts receiving your calls and texts — including the verification codes that protect your bank, email, and payment accounts. That's why this fraud exists; the number is a master key.
Protection works by adding a second factor the impostor doesn't have. Every major carrier now offers a port-out PIN or account lock, set in your account settings, that must be provided before a transfer is authorized. Business phone services offer the equivalent, sometimes called a port freeze. It takes minutes to enable and is the single highest-value security setting on a phone account.
Why it matters
For a business, a stolen main number is worse than a stolen laptop: incoming customer calls go to a stranger, password resets flow to the attacker, and getting the number back means proving ownership while your phones stay dark. Recovery is possible — carriers can reverse fraudulent ports — but it takes days, and the damage happens in hours.
The good news is that this is one of the rare security problems solved by a checkbox. Turn on the port-out PIN for every phone account the business owns, store it where your team can find it (you'll need it for legitimate ports), and the attack stops working.
In November 2023 the FCC adopted rules requiring wireless carriers to authenticate customers before processing number ports and SIM changes, and to notify account holders immediately when either is requested, a direct response to the growth of number-theft fraud.
Related terms
Ready to pick a provider?
Compare providers on account security →Frequently asked questions
How do I turn on port-out protection?
In your carrier or provider's account settings, look for 'port-out PIN,' 'number lock,' 'port freeze,' or 'transfer PIN' — the label varies. Set it to something not derived from the phone number or business address, and store it in your password manager alongside the account number. Do this for every line the business owns, especially the main published number.
Will port-out protection stop me from switching providers?
No — it just means you supply the PIN when you place a legitimate port order. That's a few seconds of work during a switch you make once every few years, in exchange for blocking a fraud that can run your business dark for days. Keep the PIN somewhere your office manager can retrieve it, so it doesn't stall your own port.
How do I know if my number has been stolen?
The signature is abrupt: your phone loses service entirely and shows no signal or 'SOS,' while the number still rings for people calling it. Carriers are now required to notify you when a transfer is requested, so treat any unexpected port or SIM-change notice as an emergency. Call your provider from another phone immediately.
What should I do if it happens?
Move fast, in this order: call your provider from another phone and report a fraudulent port, then change passwords and disconnect that number from two-factor authentication on your email, bank, and payment accounts — those are the real targets. Carriers can reverse fraudulent ports, but the account damage happens within hours, so the account cleanup can't wait for the number to come back.