blueAPACHE emPOWER Mobile Number Porting

blueAPACHE emPOWER Mobile: number porting

In line with the Australian Government and the ACMA, blueAPACHE has implemented stronger pre-port identity checks to minimise instances of fraudulent mobile number porting.

This page explains what that means for you, why the rules changed, how porting works, and how to prepare so a legitimate port completes without friction.

Why the rules changed: port-out fraud

Unauthorised porting — sometimes called port-out fraud or SIM swap — is one of the more damaging forms of identity crime, because of what a mobile number has quietly become.

Your mobile number is no longer just a way to be contacted. It is an authentication factor. Banks send one-time codes to it. Email providers use it for account recovery. Payment platforms verify transactions through it. Many corporate systems treat an SMS code as proof of identity.

An attacker who succeeds in porting your number away does not merely intercept your calls. They intercept the verification codes protecting your bank account, your email, and — through email account recovery — potentially everything else. Victims often discover the attack only when their phone loses service, by which point the damage may already be done.

The industry response was to strengthen identity verification before a port is processed, rather than relying on the losing carrier to notice something wrong.

What stronger pre-port checks mean in practice

A port request now requires verification that the person requesting it genuinely controls the account — typically an additional identity check beyond account details that a determined attacker could research or guess.

The practical effect for legitimate customers is small but real: your details must match exactly, and you must be able to complete the verification step. Approximate information that would once have passed will now be rejected.

That is the trade-off, and it is the right one. A slightly stricter process for legitimate ports is a small price against the alternative.

What porting actually is

Mobile number portability is the regulated arrangement that lets you keep your number when you change carriers. It exists because a business number is not a technical identifier — it is printed on cards, listed in directories, saved in every customer's phone, and embedded in years of correspondence. Losing it is a commercial event, not an IT one.

Porting moves the number's routing from the losing carrier to the gaining carrier. The number stays; the network behind it changes.

How the process runs

1. Identity verification. The gaining provider confirms your entitlement to the number, including the strengthened pre-port checks.

2. Submission. The port request is lodged with the losing carrier through the industry process.

3. Validation. The losing carrier checks the details. Rejections at this stage are usually administrative — a business name recorded slightly differently, a former employee still listed as account holder, an account number transposed.

4. Cutover. The number transfers. Simple mobile ports commonly complete within hours; more complex arrangements take longer.

5. Confirmation. Test inbound and outbound calls and SMS on the new service before assuming the port is complete.

Preparing for a smooth port

• Use the details exactly as billed. Pull the current bill and use exactly what appears on it — not what you believe the business is called.
• Confirm the authorised contact. If the person listed on the account has left, fix that with the losing carrier before you begin, not during.
• List every number. Ports are per-number. A missed number keeps working on the old carrier and keeps being billed there.
• Check contract obligations. Porting does not cancel a contract. Early termination charges and device repayment balances survive the port.
• Do not cancel the old service. Cancelling releases the number and can make it unportable. Cancel only after the port completes and is verified.
• Map what depends on the number. Two-factor codes, alarm and monitoring systems, payment terminals, applications that send SMS. Know what is affected during the cutover window.

Protecting your numbers from unauthorised porting

1. Add account-level security with your carrier where offered — a PIN or passphrase required before any change.
2. Move critical accounts off SMS-based verification where a stronger option exists. An authenticator app or hardware key is not portable away from you.
3. Treat sudden loss of mobile service as a security incident, not a network fault. Contact your carrier immediately from another line.
4. Restrict who can authorise changes on business accounts, and keep that list current as people leave.

Timing considerations

Avoid porting at month end, before a major event, or immediately before a shutdown. The Australian telecommunications industry also applies a change embargo over the peak Christmas–New Year period, during which carriers suspend non-essential provisioning to protect network stability. Ports scheduled into that window will queue — plan number changes well before it.

Where this sits in blueAPACHE's services

blueAPACHE added voice to its portfolio in 2012, building on the emPOWER Cloud and emPOWER Network platforms constructed in 2010. Mobile, fixed voice and collaboration sit alongside managed services, cloud, cyber security, connectivity, procurement, Microsoft technologies and advisory services — under one accountable operating model. The network carries a 99.99% availability commitment under a redundant design and reaches 165+ data centre locations.

About blueAPACHE

Founded in 1998, blueAPACHE is an Australian-owned IT services provider with more than 280 staff across Melbourne, Sydney, Brisbane, London and Miami. It holds ISO/IEC 27001:2022 certification (certificate 202507-118, Sensiba Australia, valid 1 August 2025 to 1 August 2028) and has received more than 90 industry awards.

Frequently asked questions

What is port-out fraud, and why is it so damaging? It is the unauthorised transfer of your mobile number to another carrier, sometimes called SIM swap. It is damaging because a mobile number now functions as an authentication factor — banks, email providers and payment platforms send one-time codes to it. An attacker who ports your number intercepts the codes protecting your bank and email, and through email account recovery potentially everything else. Victims often notice only when the phone loses service.

What changed with pre-port identity checks? In line with the Australian Government and the ACMA, verification now happens before a port is processed rather than relying on the losing carrier to spot something wrong. A port request requires proof that the requester genuinely controls the account, typically an identity check beyond details an attacker could research or guess.

What does that mean for a legitimate port? Your details must match exactly and you must be able to complete the verification step. Approximate information that would once have passed is now rejected. The page's own framing is that slightly more friction on legitimate ports is the right trade against the alternative.

What is mobile number portability? The regulated arrangement that lets you keep your number when changing carriers. Porting moves the number's routing from the losing carrier to the gaining carrier — the number stays, the network behind it changes. It matters commercially because a business number is printed on cards, listed in directories and saved in every customer's phone.

How long does a port take? Simple mobile ports commonly complete within hours; more complex arrangements take longer. The process runs through identity verification, submission to the losing carrier, validation, cutover, and confirmation — and you should test inbound and outbound calls and SMS before assuming it is complete.

What are the most common reasons a port is rejected? Administrative mismatches at the losing carrier's validation step: a business name recorded slightly differently, a former employee still listed as the account holder, or a transposed account number. Using the details exactly as they appear on the current bill avoids most of these.

Should I cancel my old service once I have submitted the port? No. Cancelling releases the number and can make it unportable. Cancel only after the port has completed and been verified. Porting also does not cancel a contract — early termination charges and device repayment balances survive it.

How can I protect my numbers from unauthorised porting? Add account-level security with your carrier where offered, such as a PIN or passphrase required before any change; move critical accounts off SMS-based verification to an authenticator app or hardware key where possible; treat a sudden loss of mobile service as a security incident rather than a network fault and call your carrier from another line; and keep the list of people authorised to make changes on business accounts current as staff leave.

Is there a time of year to avoid porting? Yes. Avoid month end, the period before a major event, and immediately before a shutdown. The Australian telecommunications industry also applies a change embargo over the peak Christmas–New Year period, during which carriers suspend non-essential provisioning. Ports scheduled into that window queue.

Related

• Collaboration
• Connectivity
• RingCentral
• Microsoft Teams
• Zoom
• Human risk management — identity-based attacks
• Security services
• Managed services
• Support
• Support and service levels
• Contact

Knowledge Base