Cybercriminals exploit the 'cooling-off' period of SIM cards: tips for protection

      November 18, 2025 17:17 Society

      Immediately after Russia’s Ministry of Digital Development implemented enhanced security measures for mobile operators, cybercriminals stepped up their activity. They took advantage of citizens’ lack of awareness about the new “cooling” mechanism for SIM cards and began sending phishing messages en masse. Their goal is to steal personal data and gain access to bank accounts and accounts on the “Gosuslugi” portal.

      Recall that as of November 10 a 24-hour “cooling” period for mobile SIM cards came into effect in Russia. This innovation is aimed at protection against unmanned aerial vehicles (UAVs). The “cooling” mechanism involves temporarily blocking internet access and the sending of messages for Russian SIM cards in two cases:

      - If the owner of the SIM card has returned from abroad after international roaming.

      - If the SIM card has not been used for more than 72 hours.

      When a SIM card falls under the restrictions, the subscriber receives an official SMS from their mobile operator. The message contains instructions for unblocking: either complete authorization via a link with a CAPTCHA, or call the call center and complete identification.

      Cybercriminals spoof the SMS, demanding urgent verification. The link leads to a phishing site where they try to trick out the login, password and access codes. After following the link, the victim receives a phone call from someone posing as an employee and is asked to dictate the codes.

      Vladimir Ulyanov, head of the Zecurion analytical center, gave several recommendations in an interview with 360.ru on how not to become a victim of cybercriminals:

      - Be vigilant. If you have not left Russia and have not turned off your phone, there should be no SMS notification about a block.

      - Check links. Do not click on suspicious links.

      - Make sure the internet and SMS are working. If everything is working, there should be no disconnections.

      - Do not disclose codes from SMS. Operators and government agencies never request codes by phone.

      NIA “Nizhny Novgorod” has a Telegram channel. Subscribe to stay informed about the main events, exclusive materials and operational information.

      Copyright © 1999—2025 NIA “Nizhny Novgorod”. When republishing, a hyperlink to NIA “Nizhny Novgorod” is required. This resource may contain 18+ material.