[Intro] Yeah, check it, check it (ah) Number move, but di handset stay still Crew, call it back! [Verse 1] Employee phone gone dead, no signal inna sight, Sign-in page a ask fi SMS code, bwoy, hold tight. Attacker got a replacement SIM, cah dem impersonate, Password from before, now dem a navigate. Carrier tek di number, shift it over quick, Victim lose di calls, di texts go to di trick. [Chorus] SIM swap, SIM swap, nuh trust di number lone! Who receive di code? Dat's di question on di phone. Verifier send it out, but di wrong hand get it back, Out-of-band secret, but di destination off track. Shout it: who holds di number? (Who holds it?) Mek di recovery path stronger, nuh fold it! [Verse 2] Voice call or text, same dependency, yuh see, MITRE show both a go to di attacker, believe me. NIST say AAL2, two distinct factors, straight, Phishing-resistant option offered, but nuh every gate. Offer it, yes, but nuh mandate it every time, Enrol di alternative before di primary decline. Inventory yuh SMS, yuh voice, yuh recovery run, Service desk check, yuh approval, every one. [Bridge] Telephone code nuh authority fi replace di key, Independent recovery route, dat's di guarantee. Dependency inventory, nuh method count, Ask who can authorise, and who can mount. [Chorus] SIM swap, SIM swap, nuh trust di number lone! Who receive di code? Dat's di question on di phone. Verifier send it out, but di wrong hand get it back, Out-of-band secret, but di destination off track. Shout it: who holds di number? (Who holds it?) Mek di recovery path stronger, nuh fold it! [Outro] Di number move, but di account must stay, Mek di authenticator stronger, every day. Crew: SIM swap! Tek it back! Fade out.
