Call forwarding scams

Beware of Call-Forwarding Scams: Don’t Dial *72 or *21*

Scammers sometimes pressure people to dial *72 or *21* followed by a phone number. Doing this can silently forward all your incoming calls—including voice-delivered one-time passcodes (OTPs) and security alerts—to the scammer’s number. We will never ask you to enter these codes. If in doubt, hang up and contact us using a trusted number.

Why Do *72 and *21* Exist—and Who Uses Them Legitimately?

These are real, long-standing network features known as vertical service codes (often used on U.S. carriers) and supplementary service codes (common on GSM/International networks).

• *72 (U.S.): Commonly activates unconditional call forwarding on many landline and mobile providers. You typically dial *72 + destination number to forward all calls.
• *21* (GSM/International): Performs a similar function—unconditional call forwarding—often entered as *21*destination-number# on some networks/phones.

Legitimate uses include: small businesses forwarding office lines after hours, travelers forwarding to a reachable phone, or households redirecting a landline when no one is home. The feature is convenient—but scammers exploit it by tricking you into turning it on for them.

Is This Something New?

Not entirely. Call-forwarding abuse has existed for years, but it’s seeing renewed use because more services rely on phone-based security checks and OTPs. Think of it as an old telecom feature repurposed for modern account takeovers.

How the Call Forwarding Scam Works

The scam operates with precision and psychological manipulation. Scammers create urgency and confusion to override your critical thinking:

• Late-night call tactic: Criminals call during late hours to catch you off guard, lowering defenses and judgment.
• Emergency scenario: They claim a family member is in a hospital or legal crisis, pressuring you into immediate action.
• Instructions to dial *72: You are told to dial *72 + a 10-digit number “to connect to the right desk.”
• Call forwarding activation: Dialing *72 unknowingly activates the call-forwarding feature, redirecting all calls to the scammer’s number.

Once scammers hijack your calls, they can intercept sensitive communications, impersonate you, and exploit your accounts.

An Alarming Goal: Account Takeovers

A major goal of this scam is to bypass multi-factor authentication (MFA) that uses phone calls for verification. With forwarding enabled:

• Reset passwords: Intercepting authentication calls lets scammers lock you out of accounts.
• Banking access: They can capture codes for banking apps, move funds, or steal data.
• Social media compromise: Hijacking accounts allows impersonation or spreading scams.
• Wider fraud: Controlling your number enables scams targeting your friends, family, or colleagues.

The Risks of the Call Forwarding Scam

• Identity theft: Stolen communications allow impersonation and PII theft.
• Financial fraud: Direct access to accounts and funds.
• Missed critical calls: Victims may miss urgent medical, family, or work communications.
• Further exploitation: Scammers can use your number to launch new fraud schemes.

How This Scam Plays Out (Realistic Variations)

1. Hospital diversion: Caller claims a loved one is in the ER and you must dial *72 first. You think the call fails, but forwarding is enabled.
2. Accident or arrest: A “wrong number” requests you forward a call for them using *72. You’ve just handed control of your line.
3. Prize message: A robocall says you’ve won money and asks you to enter codes like *79 or *72. In reality, you enable forwarding or a billable service.
4. International SIM swap: A stolen SIM is set to forward your calls overseas, letting scammers rack up charges and intercept communications.
5. Fake bank security: A caller posing as your bank directs you to dial *21* to “secure” your account, but it reroutes calls to them.

How to Protect Yourself

• Understand call forwarding: Learn that *72 enables and *73 disables forwarding on many U.S. carriers.
• Verify emergencies: Always hang up and independently verify claims through trusted numbers.
• Be wary of urgency: Scammers exploit pressure. Pause, think, and check before acting.
• Prefer app-based MFA: Use authenticator apps or hardware tokens instead of phone calls or SMS.
• Monitor accounts: Regularly review bank, email, and social media activity.
• Spread awareness: Share this knowledge with family, especially older relatives who may be more targeted.

What to Do If You’ve Been Scammed

1. Deactivate call forwarding: Dial *73 (U.S.) or ##21# (GSM) to turn off forwarding.
2. Notify your carrier: Report the incident and ask them to confirm no forwarding is active.
3. Secure accounts: Change passwords, update MFA settings, and use unique three-word passphrases.
4. Monitor for fraud: Watch for suspicious activity across financial and personal platforms.
5. Report: Notify the FCC, FTC, and - if money was lost—local police and the FBI. 

Common Star Codes and What They Do

Quick Reminders

• We will never ask you to dial star codes.
• If something feels off, hang up and call us directly using a trusted number.
• Use app-based MFA where available to reduce reliance on phone calls and texts.

Need Help?

If you believe you were targeted or enabled call forwarding by mistake, contact us right away. We’ll help secure your accounts and walk you through next steps.