Comparing Phone Carrier Account‑Lock Features for Port‑Out Protection

Phone number theft often starts with a port‑out: a criminal convinces a carrier to transfer your number to a new SIM they control. Once they have your number, they can intercept SMS codes and reset logins at banks, email providers, and crypto platforms within minutes. The solution is to add “friction” at the carrier so transfers and SIM changes can’t happen silently. This guide explains the different account‑lock and port‑out protection tools offered by major U.S. carriers, what they really block, how to turn them on, and how to combine them with other low‑effort safeguards.

Why Port‑Out Protection Matters

Most high‑risk account takeovers start with phone number control. If an attacker ports your number, they can receive your text‑message verification codes and password reset links. Even if you use strong passwords, SMS‑based recovery can undo your work. Locking your carrier account and adding a separate, carrier‑level passcode forces a human review and ID check before any number transfer, dramatically reducing successful attacks.

Key Terms You’ll See

• Port‑out: Moving your number from one carrier to another.
• SIM swap / SIM change: Assigning your number to a different SIM within the same carrier.
• Account PIN/Passcode: A separate secret used to authorize changes with customer support.
• Account lock / number transfer lock: A setting that prevents ports or major changes until you unlock it.
• Account notes / high‑risk flag: Internal notes instructing staff to require extra ID before changes.

What to Compare Across Carriers

• Scope: Does the lock block port‑outs only, or also SIM swaps and line changes?
• Control: Can you enable/disable it yourself in the app, or must you contact support?
• Strength: Is a separate account PIN required for every change?
• User visibility: Do you get alerts when a lock is turned off or a change is attempted?
• Notes and ID checks: Can you add instructions requiring in‑person verification?
• Multi‑line coverage: Does the lock protect every line on the account or only selected lines?
• Prepaid vs. postpaid differences: Some protections are postpaid‑only.

Carrier Feature Snapshots

The exact names and steps can evolve. Use these snapshots as a decision framework, then verify in your carrier app or by calling support from your device.

Verizon (Postpaid)

• Feature name: Number Lock (per line)
• Scope: Blocks port‑outs from Verizon. Does not necessarily block in‑carrier SIM swaps; rely on account PIN and support verification for that.
• How to enable: In the My Verizon app or web portal, open the line settings and toggle Number Lock. Ensure a strong Account PIN and a unique Billing Password are set.
• Controls and alerts: You can lock/unlock yourself. Confirm notification settings for account changes and SIM changes.
• Tips: Ask support to add an account note: “No changes or SIM swaps without in‑person government ID at a Verizon store.”

AT&T (Postpaid)

• Feature name: Port Protection (account level) plus Wireless Passcode (account PIN)
• Scope: Port Protection blocks port‑outs; the Wireless Passcode is required for changes by phone or chat. In‑carrier SIM changes still depend on store or support verification.
• How to enable: In myAT&T, turn on Port Protection (if available in your market) and set a strong Wireless Passcode that is different from your account password.
• Controls and alerts: You can enable yourself; check for change alerts in profile notifications.
• Tips: Request an account notation requiring in‑person ID for SIM or number changes. Consider adding secondary authentication on the account owner profile.

T‑Mobile (Postpaid)

• Feature name: Account Takeover Protection (ATP) and Port Validation
• Scope: ATP is designed to prevent unauthorized changes to lines, including ports; Port Validation adds a required passcode for port‑outs.
• How to enable: In the T‑Mobile app or by contacting support, enable Account Takeover Protection on each line and set a strong port‑out PIN. Ensure your account password and recovery methods are current.
• Controls and alerts: ATP is managed through the account; you should receive alerts for changes and attempted changes.
• Tips: Confirm ATP is active on every line, including data‑only lines and wearables, and ask for account notes requiring in‑person ID for SIM swaps.

Google Voice

• Feature name: Port lock via account controls when available; primary protection is Google account security
• Scope: Porting a Google Voice number out requires account access and a porting process; there isn’t a retail‑store SIM to swap. Protection largely depends on your Google Account security (password, 2‑step verification, and security keys).
• How to enable: Use 2‑Step Verification with an authenticator app or security keys on your Google account. When preparing to port a number out, you’ll generate a temporary port‑out PIN; avoid storing it in email.
• Controls and alerts: Google provides account activity alerts; review them regularly.
• Tips: Use app‑based or hardware‑key 2FA, not SMS, for your Google account that controls Voice.

Prepaid Plans and MVNOs

• Feature names: Vary widely (Transfer Lock, Number Lock, Security PIN). Some MVNOs rely solely on an account PIN for ports.
• Scope: Many prepaid/MVNO accounts support a port‑out PIN but may not have a formal “lock.” Protection quality depends on support procedures.
• How to enable: Set a strong account PIN in the app or website. Ask support to add an account note requiring ID verification for SIM changes when feasible.
• Tips: Favor providers that offer a line‑level lock or explicit port validation and that send change alerts. If they don’t, tighten your email security and consider moving your most critical accounts off SMS‑based 2FA.

Feature‑by‑Feature Comparison Guide

• Does it block port‑outs? Verizon Number Lock, AT&T Port Protection, and T‑Mobile Port Validation/ATP are designed to stop ports until you unlock or provide a passcode. MVNOs vary—confirm in writing.
• Does it block SIM swaps? Typically no. SIM swaps within the same carrier are governed by store policy and account verification. Ask for notes requiring in‑person ID and use a strong account PIN.
• Self‑service control? Verizon and T‑Mobile let you manage locks in the app; AT&T offers controls in myAT&T for eligible accounts. MVNOs differ.
• Line coverage: Ensure protection applies to every line, including tablets, hotspots, or wearable lines that attackers target because owners rarely check them.
• Alerts: Turn on push, email, and SMS alerts for SIM changes, password resets, new devices on account, and lock toggles.

How to Set Up Strong Port‑Out Protection (Step‑By‑Step)

1. Harden your carrier login: Use a long, unique password in a password manager. If your carrier supports app‑based 2FA, turn it on.
2. Set a strong account PIN: Choose 6–10 digits not tied to dates or reused elsewhere. Memorize it; don’t store it in email or plain notes.
3. Enable your carrier’s lock: Turn on Number Lock/Port Protection/ATP for each line. Verify the lock status after enabling.
4. Add account notes: Call support and request a note: “No SIM swaps, ports, or plan changes without in‑person ID verification by account owner with government ID.”
5. Turn on change alerts: Enable notifications for SIM changes, password resets, and lock toggles. Confirm your email and recovery phone are current and secure.
6. Lock down the email tied to your carrier: Use app‑based or hardware‑key 2FA and review recovery methods. If attackers control your email, they can reset your carrier password.
7. Audit every line: Protect voice lines, data‑only eSIMs, and wearable lines. Remove unused lines or add locks where possible.
8. Test your protections: Attempt a benign change (e.g., view port‑out instructions) to ensure it prompts for the PIN or shows the lock as active.

Best Practices That Reduce Risk Even If a Lock Fails

• Use stronger 2FA for important accounts: Prefer authenticator apps or security keys over SMS for banks, email, brokerage, crypto, and password managers.
• Separate recovery channels: Keep a backup email and number that aren’t broadly exposed. Avoid listing your primary mobile number publicly.
• Watch for early warning signs: Sudden loss of cellular service, flood of password resets, or new‑device alerts. Act immediately: contact your carrier, visit a store with ID, and freeze sensitive accounts.
• Limit carrier account users: Audit who can manage lines. Remove former family members or employees who no longer need access.
• Secure your devices: Lock your phone with biometrics or a strong passcode; enable Find My Device and carrier device‑protection features.

Recovery Plan If You Suspect a Port‑Out or SIM Swap

1. Contact your carrier immediately: Use another phone or Wi‑Fi calling. Ask to freeze changes, restore your number, and require in‑person ID.
2. Visit a store with ID: Get a fresh SIM/eSIM and confirm Number Lock/Port Protection/ATP is re‑enabled afterward.
3. Secure your accounts: Change email and bank passwords, revoke suspicious sessions, and replace SMS 2FA with app‑based codes or security keys.
4. Notify your bank and critical services: Ask for account holds, additional verification, or step‑up authentication.
5. Monitor for fallout: Watch for new credit inquiries, new accounts, or transactions you didn’t authorize. Consider placing credit freezes with the bureaus.

Where Credit and Identity Monitoring Fits

Even with a carrier lock, a determined attacker may attempt to open accounts in your name after a data leak or successful SIM swap. Ongoing monitoring can alert you to new credit pulls, account openings, and changes tied to your identity so you can act quickly. If you want consolidated privacy, credit, and identity‑theft alerts in one place, consider a dedicated monitoring and recovery resource such as SmartCredit for privacy, credit monitoring, and identity protection.

Quick Checklist Before You Move On

• Unique carrier account password in a password manager
• Strong account PIN set and memorized
• Number Lock/Port Protection/ATP enabled on every line
• Account note requiring in‑person ID for any SIM or plan changes
• Alerts enabled for SIM changes, password resets, and lock toggles
• Authenticator app or security keys on sensitive accounts (avoid SMS 2FA)
• Credit freezes or monitoring in place

Frequently Asked Questions

Does a port‑out lock stop SIM swaps within the same carrier?

Usually not. A port‑out lock focuses on transfers to another carrier. SIM swaps are controlled by store or support procedures, so rely on a strong account PIN, change alerts, and an account note requiring in‑person ID.

Can support override my lock?

Support can override changes with proper verification. That is why your account PIN, store‑level ID check, and detailed account notes are essential layers.

Do family or business accounts need extra steps?

Yes. Apply protection to every line, limit who can make changes, and review user roles regularly. Attackers often target secondary lines.

What if my MVNO doesn’t offer a lock?

Use a strong account PIN, enable all change alerts, and tighten email security. Consider moving critical numbers to a provider that supports explicit port‑out locks and port validation.

Conclusion

Port‑out protection is one of the simplest ways to derail SIM‑swap and account‑takeover attacks. Turn on your carrier’s lock feature, set a strong account PIN, and add notes insisting on in‑person ID for any changes. Then close the loop by hardening the email tied to your carrier account and moving your high‑value logins away from SMS codes. With these layers in place, a criminal’s easiest path to your accounts gets shut down—and you gain time and visibility to respond if anything suspicious occurs.