Beeline Customers Targeted in Mass Mobile Number Theft via eSIM Fraud

• July 27, 2026

Widespread eSIM Fraud Leads to Mobile Number Thefts Among Beeline Subscribers

Subscribers of the Russian telecommunications provider Beeline have recently encountered a surge in cybercriminal activity involving the unauthorized takeover of their mobile phone numbers. The incidents hinge on a sophisticated scam leveraging virtual SIM card technology, known as eSIM, to hijack user accounts and reroute phone numbers.

According to reports, the perpetrators initiate the attack by sending fraudulent login confirmation requests directly to Beeline customers. When a user inadvertently approves such a request, it triggers the issuance of a new eSIM profile linked to the victim’s mobile number. This process simultaneously disables the original physical SIM card, effectively transferring control of the phone number to the attacker.

This method enables criminals to bypass traditional SIM swap protections by exploiting legitimate account access procedures. Once in possession of the stolen number, attackers can intercept calls and text messages, which are often used as verification steps for accessing sensitive accounts including banking services and social media platforms.

The rise of this eSIM-related fraud exposes vulnerabilities inherent in the adoption of virtual SIM technology by mobile carriers and highlights the need for enhanced security protocols. Beeline customers are advised to exercise caution when responding to login confirmation prompts and to remain vigilant for any unusual activity on their mobile accounts.

While the exact scope of the thefts has not been fully disclosed, the increasing frequency of these cases signals a broader trend in mobile security exploitation, particularly within the telecom industry.

Telecom companies worldwide have been integrating eSIM technology to provide users with greater flexibility and convenience. However, the transition to eSIMs also presents novel security challenges. This incident underscores the importance of implementing robust authentication mechanisms that can effectively differentiate between legitimate user actions and fraudulent attempts.

In addition to personal vigilance, experts recommend that mobile service providers strengthen monitoring systems to detect suspicious account behavior early and educate customers about potential cyber threats linked to eSIM misuse.

As mobile number theft through eSIM abuse grows, regulatory bodies and carriers alike are under pressure to develop improved safeguards to protect users from the financial and privacy damages that such breaches can cause. The Beeline case serves as a critical example of evolving cyber threats in modern telecommunications.

Beeline users in Russia face widespread mobile number theft through deceptive eSIM activation schemes exploiting account logins.