Movistar fined over SIM swap security failures in Colombia

Details: Manny Pham; Category: Regulation; 01 June 2026; 255 views

Movistar has been fined COP1.36 billion (US$330,000) by Colombia’s telecommunications regulator after an investigation found weaknesses in its SIM card replacement procedures that allegedly enabled fraud against customers.

According to Colombian newspaper El Colombiano, the Superintendency of Industry and Commerce (SIC) launched the investigation following complaints from users who lost mobile service after their SIM cards were replaced without authorisation.

Affected customers reported that after losing control of their phone numbers, fraudsters gained access to bank accounts and other digital services linked to the compromised lines through a technique known as SIM swapping.

The SIC concluded that Movistar failed to implement adequate identity verification measures when processing SIM replacement requests, increasing the risk of unauthorised access to customer accounts and services.

The regulator also criticised the operator’s handling of customer complaints, stating that Movistar failed to adequately explain or justify its responses to users who reported losing control of their mobile numbers and associated financial services.

Alongside the financial penalty, the SIC ordered Movistar to strengthen its identity verification procedures for SIM card replacements to reduce the risk of future fraud and protect customer data.

The decision is not yet final and may be appealed.