Was My Phone Number Leaked? How to Check and What to Do
Your phone number is more sensitive than you think. It is tied to your bank accounts, used for two-factor authentication, and listed on dozens of data broker sites. If it was leaked in a breach, you are vulnerable to SIM swapping, targeted phishing, and identity theft.
Last updated March 10, 2026
> What to do
- 1
Scan for breaches that included your phone number
Run an exposure scan to see which breaches leaked your phone number alongside other personal data. Many breaches include phone numbers even when the headlines only mention emails and passwords.
- 2
Add a PIN or passcode to your carrier account
Call your carrier (AT&T, Verizon, T-Mobile) and set up a port-out PIN. This prevents attackers from transferring your number to their SIM card without knowing the PIN.
- 3
Switch SMS 2FA to an authenticator app
If you use text messages for two-factor auth, switch to an authenticator app. SIM swapping lets attackers receive your text messages, bypassing SMS-based security entirely.
- 4
Remove your number from data broker sites
Sites like Spokeo, WhitePages, and TruePeopleSearch list your phone number publicly. An EXPOSE report shows which brokers have your number and includes removal instructions for each one.
- 5
Use a secondary number for online signups
Get a Google Voice number or similar service for online forms and signups. Keep your real number for banking and trusted contacts only.
> Why phone number leaks are dangerous
SIM swapping is the biggest risk. An attacker calls your carrier, pretends to be you, and transfers your number to their SIM card. Now they receive your text messages — including 2FA codes. They log into your email, reset your bank password, and drain your accounts. The 2024 AT&T breach exposed 73 million phone numbers. The Match Group breach in 2026 exposed millions more. Your number is almost certainly in at least one criminal database.
> SCAN_NOW
Check if your phone number was exposed
Scan your email to see which breaches included your phone number, and which data broker sites are listing it publicly.