Response to a Princeton study on SIM swapping

On January 10th, a study from Princeton University came out finding that some wireless carriers were vulnerable to sim swapping techniques. Even though we can’t speak to specific details of their experiments pertaining to US Mobile as they were not shared with us for further analysis.

We can surmise from the report that they were likely attempting these sim swaps via phone calls to our support. We think in US Mobile’s case, the study overlooked the fact that US Mobile is the only fully digital wireless carrier in the report. This means that 90% of our customer interactions happen over our progressive web app.

US Mobile has historically received less than 1% of its SIM swapping requests over the phone. Furthermore, SIM swapping over the phone to our CSR’s is no longer possible. They must be initiated from authenticated status while signed in to our app or dashboard. Considering that the study failed to take into consideration that US Mobile was fully digital, it does not reflect how the majority of SIM swapping happens at US Mobile.

In addition, we believe the best security measures come from leveraging technology with AI, ML and big data because it helps create more secure environments without creating roadblocks and additional hassle for our customers.

Arguably, every technique in their Table 1 on its own is vulnerable and can be greatly enhanced by the types of technology and tools we have in the backend.

US Mobile’s approach to security and protecting customers from SIM swapping can be found here. We hope that some of these practices can be adopted by other major carriers and companies.

Creating the most secure carrier

Security is a core part of the US Mobile experience. Building on the experience of creating the world’s most advanced hybrid network operator, we are also continuously creating one of the most secure carriers out there. 

Over the past two years, Sim Swapping and unauthorized port outs have garnered a lot of attention as criminals have used these techniques to steal phone numbers from their target victims and then use them to highjack banking and other sensitive accounts.  Banks and other targets have started to address these types of attacks, but carriers must do their part to protect their subscribers. 

As a fully digital hybrid network operator, our view of our customers is incredibly comprehensive. When an existing customer contacts US Mobile through our Progressive Web App (PWA), we are already seeing a complete picture of the user from their current location, device, and operating system to their customer service history.  Additionally, PWA’s are delivered over HTTPS, meaning all content delivery within the PWA happens over HTTPS with browser-to-server encryption.

We also recognized that faceless voices cannot always be trusted, and CS reps can be prone to social engineering attacks, so we addressed that by restricting SIM swaps and other sensitive account changes from being carried out over phone calls.  As a fully digital network operator, more than 90% of our interactions already happen through our app.

In order for customers to request a Sim Swap at US Mobile today, they are required to send a request while signed in to our PWA or progressive web app. At that point, we have a clear view of the incoming request and can leverage machine learning across all our data points of current and past behavior to verify the request.  For example, we know a subscriber is normally based out of Miami, Florida so a request for a SIM swap from somewhere in California would immediately elevate the security verification threshold.  Additionally, triggered One-Time-Passcodes (OTPs) are used to aid our real-time authentication.  These tools help us give a seamless authentication experience without creating further roadblocks for our customers.

Modern System and APP Security

US Mobile’s website, dashboards, and apps are the most critical elements of our security framework and use a modernized technology infrastructure to make authentication smarter, more adaptive, and more user-friendly.

More secure(and faster) experience with PWA and Device Fingerprinting: The US Mobile dashboard and apps are created with Progressive Web Apps (PWA). PWA is a powerful tool that allows us to make the US Mobile experience faster and more secure. All the information that is sent through PWAs is encrypted. As users interact with our PWAs, they progressively build a relationship with the app over time. Using that relationship the PWA has built with users, we use machine learning to identify which interactions are genuine and which are suspicious.

Encryption: On our website, dashboard and app we encrypt all the information that we send and receive, limit the number of failed sign-in attempts, monitor for fraud to identify all sorts of attacks as they occur, and regularly review our policy to help adapt to any new threats to our subscribers’ security, using cutting edge technologies like Progressive Web Apps, and device fingerprinting to mitigate risk. 

Advanced Security Services

We also built a robust set of services that make it easy for users to securely & conveniently authenticate themselves and prevent any unauthorized access to their accounts—all without impacting usability. 

We have created additional safeguards within our custom-built CRM, where customers can add another level of security by choosing security features such as “NeverSIMSwap” and “Account Lockdown.”  When any of these feature is enabled, extra layers of the security protocols are implemented within the CRM to silo them off behind authentication walls.

Definition of Services

NeverSIMSwap: A feature that restricts all SIM swaps on the account and enables users to request additional verifications to authorize any SIM swaps in their accounts.

No Port Out: A feature that can be enabled to require extra verifications before any ports are authorized. 

Account Lockdown: In addition, users can request their account be locked down such that any changes to the account will have to be authenticated and verified before changes are made. 

Users can request any of the above features free of charge just by reaching out to us on chat, email, or phone.

US Mobile notifies users via email or push notifications when changes are made to their account. If anything looks suspicious, we instruct users to change their password immediately.

What is an eSIM? Why is it Better for Consumers?

We talked about how eSIMS were going to be a game changer for customers last year. And our predictions were right it seems. Apple has added eSIMs into their latest phones, and they’ve been using that technology in watches since they launched the Series 3 in September last year. But what is an eSIM? Short for”embedded SIM” (also called eUICC), an eSIM is a digital SIM that allows you to activate a cellular plan from a carrier without having to use a physical SIM card.

Why would manufacturers Switch to eSIMs?

For phone manufacturers, there are two reasons why they’d want to switch to eSIMs.

1. Better design

Physical SIM cards are mostly useless plastic and the actual working part of the SIM is that tiny metal strip. Removing that tiny bit of plastic means that phone can be a tiny bit thinner.

And as phones and devices get smaller and thinner each tiny little bit of space counts. There’s also the housing, reader, and tray that are needed with physical SIM cards. Manufacturers can eke out a bit more space as well. Plus, removing slots and openings from any device’s shell make it less likely to be compromised by water or dust.

2. Better experience for device owners

In Apple’s case, they decided to use all that extra space to add Dual SIM options to their options. This allows them to deliver a much better experience for their customers.

Here’s why eSIMs are better for consumers:

1. You’ll be able to change carriers without having to get a new SIM. You can change carriers or your plan in your phone settings. This means less time speaking with carriers, and ordering and waiting for new SIMs. Software does everything.

2. No more having to deal with cutting SIM cards, or finding adapters

3. With eSIMs and dual SIMS, you can have two plans from two different carriers. This means you can:

• Use one number for business and another number for personal calls.
• Add a local data plan when you travel outside of the country or region.
• Have separate voice, text and data plans.

With that being said, if you need a second number with a more basic plan, or want to buy talk, text or data separately you should take a look at some of our plans. They start at only $4/month.

image sources: Apple, GSM Arena

Bring your iPhone XS Max, Xs or XR to US Mobile and get up to $400 OFF

***Limited Quantities Available****

From the moment you activate your line with US Mobile’s Super LTE Network, you’re up and running. Our Super LTE network is designed to give your iPhone XS, iPhone XS Max, and iPhone XR the ludicrous speeds it needs. Up to 150 Mbps*. Hear and be heard without having to raise your voice. With VoLTE, the most advanced network for voice. Check usage in our award-winning dashboard. Without paying extra. Design your own cell phone plan with unlimited options and get right to work–or play. And add Top Ups on the go. Everything with the Super LTE network is designed to look and feel as good as the new iPhone XS, iPhone XS MAX and iPhone XR.  

Redeem this offer

1. Order a US Mobile Starter Kit (so it arrives before you get your new phone)

Use the promo code CHEAP400  in the shopping cart when ordering your Starter Kit.

UPDATE: CHEAP400 has currently sold out. But we are still offering up to $100 OFF with the CHEAP100 promo code for a LIMITED TIME. The supply of CHEAP100 promo codes is limited as well.

2. Get an iPhone Xs Max,  iPhone Xs or iPhone XR

Buy it directly from Apple. Or bring it from another carrier.

After you get Starter Kit

3. Activate your line with the promo code

You’ll receive an email with another promo code to apply during activation which will enable the monthly credit. You should also enable auto-pay at that point to ensure no gaps in service. Enjoy US Mobile Talk, text, browse, and stream at remarkable speeds anywhere in the in the US on America’s best network

Why US Mobile?

Tailor a plan for your need

Pay for what you use. Change your plan whenever you want. No contract, ever.

Customer Service

Phenomenal customer service that’s available 24/7/365.

The best coverage, reliability, and speeds on America’s best network.

Talk, text, browse & stream at remarkable speeds, anywhere in the US on America’s #1 Network.

Frequently asked questions

How long will this offer be available?

To be eligible for this offer you must activate a new line or port in an existing number on your iPhone Xs Max, or iPhone Xs before the end of November 2018. The offer quantity is limited, but a similar offer may be available to users who try to use this code after it has run out.

How will I get my discount?

You must use the promo code when buying a starter kit. All iPhone XS, and iPhone XS Max users who join our Super LTE network, using the CHEAP400 promo code, enable Auto Pay and have no gaps in service will get up to $400 of their cell phone bill (not including taxes, fees, or top-ups).

What do you mean by continuous service?

You cannot have any gap in service, from the activation day to the twelfth month, or you will forfeit the remainder of your promotional balance. The best way to avoid any gaps in service is to enable auto-pay.

What if I’m not in the US?

Since we do not offer service outside the US, users outside of the US will not be eligible for this offer.

Who is eligible for this offer?

Any user who purchases a starter kit with the iPhone promo code and activates a new line or ports in an existing number with an iPhone XS, iPhone XS Max, or iPhone XR and maintains 12 months of continuous service.

I already added a line to my account- am I still eligible for this offer?

Unfortunately, this offer is only available to customers when they are activating a new line or porting in an existing number

Is there a limit to how many times I may take advantage of this offer?

The offer is limited to one per person and is only available in the US.

What does service credit cover?

Discounts and service credit are only good toward monthly base plans.  They do not cover Top Ups, taxes or other regulatory fees.

Do I still need to pay taxes and other fees?

Yes, discounts or credits do not cover Top Ups and taxes, regulatory and other types of fees.

What if the value of my plan is cheaper than the monthly credit?

Customers who are on a plan that has a value lower plan than the amount of the monthly bill credit will forfeit their ability to claim the remainder of the refund as credit, service credit, cash-back, or refunds.

Can I combine this promotion with other offers?

This offer cannot be combined with other offers.

What if I’m a current US Mobile customer—can I use this offer?

You can be eligible for this offer if you activate a new line on our Super LTE network.

Can I keep my existing number?

You can keep your existing number. Or get a new one. It’s totally up to you. The option will be available when you are activating your SIM.

Lost Service on Rok Mobile?

ROK Mobile seemingly abruptly stopped service on their CDMA network as confirmed by WhistleOut, Fierce Wireless, Best MVNO and others. This left many of their customers stranded without service.

If you’re a stranded Rok Mobile customer, here’s what you do?

1. Don’t panic.
2. If you want to keep using your phone you’ll need to find carriers that are compatible. Sites like Whistleout, and Best MVNO have recommendations. Our Super LTE network is also compatible.
3. If you want to keep your phone number you’ll need to port out your number from Rok. You’ll need your account number and PIN from Rok. And, unless you’ve changed them, this is how you get it:
   • Account Number: Your ROK Mobile phone number
   • PIN Number: Last 4 digits of your ROK Mobile phone number
4. Before you switch you should consider all the plan options there are available. You can check out US Mobile’s Unlimited Plans that offer more data for better prices. Plus, we’re offering all Rok Mobile customers that were stranded a free Starter Kit and 50% Off their first month. Just use the promo code ROK during checkout.

We’re sorry to hear that Rok Mobile is shuttering their services on that network, but we’re happy to help any of their customers who still need phone service on their devices with the

img source: Best MVNO

Does your Alarm Need a SIM Card? Look No Further!

We have recently seen an increase in demand for SIM cards for wireless alarms and home security systems. So, we launched a new page dedicated to SIM cards and plans for Wireless Alarm Systems! A wireless home security system is just one of many different types of connected devices using US Mobile’s SIM cards and plans.

Choose the Right Plan for Your Alarm System

US Mobile’s customizable talk, text or data plans, make it easy and cheap for you to connect any device. Our monthly plans are so affordable that if you have a home security system only using texts messages, you would be paying $4 per month, including all fees. We know. That’s crazy. If you need data, just add it to your plan and pay $6 per month for 100 texts and 100 MB.

If for some reason you don’t want to keep the alarm connected for a particular month, you can downgrade and just pay a monthly fee of $2 to keep your SIM card active.

Most of you are probably worried about the opposite though! It is critical to have the alarm system running at all times. In order to ensure that, you also have the option to set your account to Auto Pay to avoid missing a payment. Remember that you can always log in to your account and see how much of your plan you’ve used with our real-time dashboard.

All Connected Devices are Welcome

US Mobile offers plans for any and all security systems and alarms that use SIM cards. If you have other connected devices in your home, or if you’re looking for a new wireless phone service, visit our Plans Page to see what you could be saving today.

Finally, don’t forget to check out our Alarm Page.

3 Things You Should do Before Selling Your Old iPhone

Back it up, back it up. Your old iPhone.

Another quicker method is to back up your old phone using iTunes on a Mac or PC. Connect your iPhone to your device and switch on iTunes. Click the little iPhone icon on the top-left corner, and select Back Up Now. Give it a few minutes to complete the backup. When you connect your new phone to your computer, it’ll ask you if you want to restore from iTunes.

Delink your account from the phone.

You should sign out of your account so that it’s not linked anymore to any more of your profiles. This will also make sure that the person who bought your phone won’t have any problem activating anything, can’t access any of your profiles or services using the account on your phone. 

Go to Settings>Your Profile. Scroll all the way down, and Sign Out. Your account will be delinked from the phone, and now the new user can reactivate it with his account. You’ll also be signed out of all other services that use that profile, like iCloud, iTunes, App Store, Family Sharing and any other apps you may have set up. The new owner of the phone can’t use your account for anything now.

Note: If you’re getting a new number, you might want to delink your old number from iMessage as well.

DELETE EVERYTHING

After you’ve backed everything up, and signed out of all your accounts you can finally reset your phone. It is as oddly satisfying as it sounds. 

Luckily, with iPhones, you don’t have to worry about encrypting your data before deleting it. Every iPhone after the 3GS encrypts data automatically. Go to Settings > General > Reset > Erase All Content and Settings. And that’s it! When deleting all your data on your iPhones is finished, it will show you the welcome screen as if it were a brand new phone.

CDMA vs GSM vs LTE: The Differences & What You Need to Know

US Mobile provides service on the leading GSM, CDMA and LTE networks in the US. But what are GSM and CDMA, and how do they affect your phone, service, and coverage?

What is CDMA vs GSM vs LTE?

GSM and CDMA are different technologies that phones use to connect. They were both developed in the early nineties for 2G connectivity. But engineers couldn’t agree on which one was the best. So, in the US the FCC settled on a “dual-mode” route that required either GSM or CDMA. That’s why we have 2 different technologies.

Europeans though, agreed on GSM, as did the rest of the world. That’s why GSM is the de-facto system for the rest of the world.

For 3G, carriers only improved the original GSM and CDMA technology. So the duality remained.

Fortunately, engineers agreed on a new cellular system for 4G connectivity. And that’s LTE. Carriers designed LTE for data. But it’s been working so well that they replacing everything else with it. For example, they’ve introduced VoIP solutions like VoLTe to replace traditional calls.

Do all the carriers agreeing on LTE mean it will easier to switch phones between carriers?

You would think so. But, no.

Most new phones use LTE only for data and rely on GSM or CDMA for voice and texts. So you’re stuck with choosing between a CDMA and GSM phone if you want voice. However, most of Verizon and Sprint’s customers are on LTE. They’re working on VoLTE to solve the voice over CDMA problem so they can phase out 3G as early as 2019.

Moreover, the four carriers provide LTE on different frequency bands. They sell phones that only work on their frequencies, making it difficult to switch.

Many phone companies are also making phones that support CDMA, GSM, LTE on most bands. iPhones 6 and beyond, Google Pixels, Samsung S7s and beyond.

To find out if your phone is LTE enabled, check out this list or click on the brand below.

Apple   –   Samsung   –   Huawei   –   LG   –   Alcatel   –   HTC   –   Sony

What you NEED to know about CDMA vs. GSM vs LTE

Call Quality on CDMA vs GSM

Whether you use a CDMA or GSM network, it does not matter. What matters is the coverage from the CDMA and GSM networks. Luckily, US Mobile has excellent cellular coverage using the best GSM and CDMA networks in the US.

CDMA vs GSM phones

Switching GSM phones between different networks is easier than with CDMA phones. That’s because all GSM phones use removable SIM cards. You can put a SIM from one phone into a newer one and all your info like phone number and plan will go to the new phone.

CDMA phones didn’t use SIMs. They used embedded serial numbers to identify their users to carriers. This meant three things:

• You couldn’t switch phones easily. You had to tell your carrier that you have a new phone so they can link the serial number of the new phone to your account.
• This gives carriers more control over your phone choices. And, more often than not, they didn’t accept new phones unless you bought it through them.
• Since there was no way to insert a SIM card you could not take your phone with you to a GSM carrier.

LTE phones need SIM cards. And, since LTE provides the fastest data most newer phones also have LTE capabilities. Thus, most newer phones also take SIM cards. Does that mean you can switch phones between carriers? It will be easier, but you still have to make sure your phone has the different frequency bands. Or buy phones that support CDMA, GSM and LTE on most bands.

Or find a carrier who provides service on GSM, CDMA, and LTE networks, lets you bring any phone and helps you figure out the best network for your phone (seriously just ask us and we’ll help), and provides great service and coverage with that 🙂

US Mobile’s Starter Kit Comes with a GSM and Super LTE SIM Card

“Why choose a SIM and a network when you can try both and choose whatever is best?“ This was the question that triggered the launch of  US Mobile’s Starter Kit.

US Mobile operates on the two best networks in the country and to access them, you need either a GSM SIM card or a Super LTE SIM Card. However, as a customer, it is difficult to know which SIM and network that will work best in your area. That’s why we decided to not make you choose, but rather send you both SIM cards so that you can try what works best for you. You get two SIM cards for the price of one, at $3.99. Feel free to do whatever you want with the SIM card you don’t choose to activate. We’ve heard that SIM cards make great gifts to friends or family members 😉

Ordering a Starter Kit at US Mobile

Getting started with us is super easy! Begin by ordering a SIM kit, containing a GSM and Super LTE SIM card. Then, you need to activate your prepaid SIM card and choose between 800+ plans. Yes – we know that’s a lot of plans to choose from but we really want you to find the plan that suits your individual needs. Finally, insert the SIM card into your phone and you’re good to go! We even include a SIM card ejector to make the switch as smooth as can be.

As always you can bring your phone, keep your number and we won’t hold you to any contracts. If you haven’t checked out our new Super LTE plans yet, we suggest you head over to our Plans page. The unlimited plans are unique on the US market since it lets you decide the data speed.

Need for (Data) Speed? Or Do You Prefer a Cheaper Data Plan?

The fastest animal in the world is the cheetah, reaching speeds of up to 61 miles per hour. (Btw this record was set by an 11-year-old cheetah called Sarah in 2012.) But faster isn’t always better, at least not when it comes to data speeds.

Faster speed = More Consumption

We’ve covered this before but the faster data speed, the more data you end up using. If you do the exact same thing, for instance, download a file with slow data vs fast data you’ll use the exact same amount. That’s, however, not the case when you use your phone in a habitual way.

By having a faster data plan, your phone will download elements faster when you’re browsing the internet or watching videos. Instead of downloading partial sites you visit, you end up automatically download all of the page, including all its widgets. Entire videos will also be buffered, even though you just watched parts of it. This means that a faster data speed equals an increased consumption of background data. In addition to automatic downloads, you might be tempted to stream at a higher quality if your data is fast. This also consumes more of your data plan.

Our Data Plans

Similar to how certain apps like Netflix and Spotify lets you adjust streaming quality, we let you adjust your data speed in our plans. As far as we’re aware, we’re the only one on the market offering unlimited plans at different data speeds. If you mostly use your phone for regular web browsing in checking mail, a Standard data plan should be sufficient. You get about 1 Mbps with the Standard plan and by not maximizing your data speed, you can save $20 per month.

Further, a typical user might enjoy watching the occasional video clip, add stories to Instagram or snaps to Snapchat. If you’re that kind of user, you might be better off going with the Fast plan. The data speed is 5 Mbps, which means that you will have a smooth experience as you go about using your phone. If you’re a data hog, on the other hand, who enjoys watching a lot of moving content, go with the Ludicrous plan. The speed is uncapped, which means you’ll reach speeds of up to 150 Mbps.  That’s nothing but blazing fast!

By offering data plans at the different speeds, you get the freedom to choose what’s more important to you – maximizing speed or being frugal. It’s up to you!

Using a Mobile Hotspot

As you can see in the matrix, you also get the option to add a mobile hotspot to your plan. So what is a hotspot? If you turn on your cellular connection into a Wi-Fi connection, you’re able to access and use the data plan from other devices than your phone. This is called creating a hotspot, or a mobile hotspot to be more specific. It’s a great service if you’re not able to connect to an open Wi-Fi but you need to send an email on the go or if you’re working temporarily at a location that lacks an internet connection. When you connect your computer to your phone, it’s called tethering.

All our Super LTE Custom plans include the hotspot service.