# Amaysim pays $138,600 over mobile-number transfer failures

> ACMA found 13 breaches of mobile-number transfer checks at Amaysim. Here is what the regulator found and what to do about an unexpected account change.

- Canonical URL: https://techxtelco.com/news/amaysim-mobile-number-fraud-penalty/
- Published: 2026-10-01
- Updated: 2026-10-05
- Topics: Telco, Mobile, Security, News
- Author: Michel Elijah
- Image: https://anrkjmgqmwfosbvyzrzc.supabase.co/storage/v1/object/public/article-images/amaysim-mobile-number-fraud-penalty/hero-v1.webp
- Publisher: Tech X Telco (https://techxtelco.com)

Amaysim has paid a $138,600 penalty after failing to perform mandatory identity checks before transferring mobile numbers from other providers. The Australian Communications and Media Authority announced the action on 30 September.

ACMA found 13 breaches in 2025 that resulted in unauthorised number transfers. It also accepted an enforceable undertaking requiring an independent review, improvements and reporting. The regulator says it is not aware of financial losses arising from these breaches.

### What you need to know

The finding concerns safeguards around transferring a phone number. It is not an announcement of a general Amaysim data breach. If you receive an unexpected account-change alert or suspect your number has been moved, contact your telco through its official contact route and alert your bank promptly.

Source: [ACMA: Amaysim and Ezee Mobile breach anti-fraud rules](https://www.acma.gov.au/articles/2026-09/amaysim-and-ezee-mobile-breach-anti-fraud-rules)

## What went wrong?

The rules require an additional identity-verification process before a mobile number moves to another provider. ACMA's action concerns Amaysim's failure to carry out those checks, rather than a problem with every legitimate customer transfer.

The same announcement separately warns Ezee Mobile, operated by Switch Mobile Networks, for failing to provide required scam-reporting information. That warning should not be described as the same identity-check finding or penalty imposed on Amaysim.

## Why an unexpected number transfer matters

ACMA warns that people who gain control of a phone number may try to access accounts linked to it. Its warning signs include unrequested verification codes, account-change notifications, login or password-reset attempts and a phone unexpectedly losing service.

Losing signal alone does not prove fraud. Look at the wider account activity and check with the provider. The practical aim is to establish whether the loss of service is an ordinary connection problem or an unauthorised change.

Source: [ACMA: protect yourself from mobile-number fraud](https://www.acma.gov.au/articles/2026-04/scam-alert-protect-yourself-mobile-number-fraud)

## What to do if you suspect it has happened

1. Contact your bank immediately if you suspect a scam, so it can assess and stop affected payments.

2. Contact your mobile provider using a number from its official website, app or bill. Explain any unexpected account changes and ask it to check your service.

3. Do not use links or callback numbers in an unexpected message to investigate that message.

4. Review the security of linked accounts, including email. Use strong unique passwords and multi-factor authentication where available.

5. If your identity details have been compromised, seek help from IDCARE through its official website.

Write down when your phone stopped working, which notifications arrived and the reference numbers given by the provider. Keep those records somewhere you can access while the mobile service is unavailable. This is practical record-keeping advice, rather than a promise about a provider's recovery time.

## Prevent a rushed response from creating another problem

An alarming message can make a supplied phone number feel like the quickest way to get help. Take a moment to find the provider's contact details independently. Explain the situation before following instructions to change an account or share identity documents.

[Our callback-scam explainer shows why the number printed on a message or invoice may be part of the trap.](https://techxtelco.com/news/callback-scams-fake-invoice-phone-number/)

The Amaysim finding does not tell an individual reader whether they were affected or whether compensation is due. Those questions require the provider's account investigation and the person's circumstances. Avoid treating a headline penalty as a list of confirmed customer losses.

[ACMA previously took action over Telstra's mobile-fraud protections; our report distinguishes those separate findings.](https://techxtelco.com/news/telstra-fraud-penalty/)

[A disaster-related outage is a separate situation: our temporary disaster roaming guide explains activation and compatible-phone requirements. A loss of service alone does not establish number fraud.](https://techxtelco.com/news/temporary-disaster-roaming-october-target/)

[For the separate story about AI access for cybersecurity defenders, see the Gemini 4 Argon announcement. It is not a consumer remedy for an unauthorised number transfer.](https://techxtelco.com/news/gemini-4-argon-access/)

### Sources and further reading

- [ACMA: Amaysim and Ezee Mobile breach anti-fraud rules](https://www.acma.gov.au/articles/2026-09/amaysim-and-ezee-mobile-breach-anti-fraud-rules): 30 September findings; $138,600, 13 breaches in 2025, no known financial losses and distinct Ezee warning.

- [ACMA: protect yourself from mobile-number fraud](https://www.acma.gov.au/articles/2026-04/scam-alert-protect-yourself-mobile-number-fraud): Warning signs; official callback route; bank and telco contact; account security and IDCARE.
