The UK is set to become the first country in Europe to officially ban the possession and supply of "SIM farms".Passed under the landmark Crime and Policing Act 2026, this legislation directly outlaws the physical tools criminals use to orchestrate bulk text message scams, marking a major leap forward in the fight against cyber-enabled fraud.
With fraud accounting for more than 40% of all reported crime in England and Wales, the ban provides law enforcement with a crucial weapon to disrupt scammers at their source.
What is a SIM Farm?
Also known as a SIM box, a SIM farm is a physical electronic device capable of holding five or more SIM cards simultaneously or interchangeably.
By connecting these boxes to a computer, fraudsters can send thousands of text messages or place automated phone calls at the touch of a button. Previously, these low-cost devices were easily purchasable online with zero identity verification, making them highly accessible to criminal gangs.
How Criminals Exploit Them
Before this legislation, SIM farms served as the engines behind some of the UK’s most persistent scam campaigns:
Industrial-Scale Smishing: Criminals use them to blast out hundreds of thousands of fake parcel-delivery notifications, tax rebate warnings, or bank alerts in minutes.
Creating Fake Accounts: Scammers use SIM farms to rapidly receive SMS verification codes, allowing them to mass-generate "verified" fake profiles on social media and messaging apps.
Evading Detection: By routing messages across many different PAYG (pay-as-you-go) SIM cards, criminals could easily bypass standard telecom security filters.
How the Ban Helps Protect the Public
The new law introduces a powerful shift in how the police can prosecute fraudsters.
| Old System | Under the Crime and Policing Act |
| Proof of Intent Required: Police had to catch fraudsters actively using the devices to commit a scam to secure a prosecution. | Illegal to Possess: Simply possessing, importing, or supplying a SIM farm without a legally proven, legitimate reason is now a criminal offence in its own right. |
| No Barriers to Entry: Devices were cheap, unregulated, and widely available to purchase online without ID checks. | Heavy Penalties: Offenders face unlimited fines in England and Wales, and a £5,000 fine in Scotland and Northern Ireland. |
| Voluntary Industry Blocklists: Networks tried to block numbers, but criminals could quickly swap SIM cards. | Stops the Supply: Shuts down the local distribution of the hardware itself, forcing criminals to use more expensive, easily tracked web alternatives. |
Legitimate Exceptions: The law does include protections for legitimate industries that use SIM multiplexers—such as public transport Wi-Fi routing, emergency broadcasting services, and telecom network testing.
By combining this ban with Ofcom's new rules restricting text volumes on PAYG cards, the UK is successfully dismantling the cheap, high-volume infrastructure that has plagued mobile users for years.
Ofcom’s rules target a major loophole used by international scammers. Scammers abroad know we are far more likely to answer a call displaying a familiar UK mobile number (+447) than an unknown international country code.
Stopping this trick—known as Caller ID spoofing—is technically much harder for mobile numbers than it is for landlines. This is because roaming is a legitimate feature; a real UK mobile user needs to be able to make calls from Spain or the US and still display their genuine +447 number to friends back home. (Ofcom)
To solve this, Ofcom has introduced a clever two-pronged strategy targeting both network-level blocking and a new "withhold and verify" protocol.
1. Stopping Landline Spoofing (The Foundation)
To understand how Ofcom is tackling mobile numbers, it helps to look at what they have already successfully rolled out for landlines.
Blocking Network Numbers: Telecoms providers must block international calls where the Network Number (the hidden background data showing where a call is physically routed from) is disguised as a UK landline.
Blocking Presentation Numbers: Providers must block calls from abroad that try to display a UK landline as a Presentation Number (the caller ID number you actually see on your screen).
The Result: When BT voluntarily piloted this rule, they successfully blocked up to 1 million scam calls a day from entering their network.
2. The New Mobile Spoofing Rules: "Withhold and Verify"
Because direct blocking would accidentally cut off legitimate UK tourists calling home from abroad, Ofcom’s latest guidance introduces a dynamic verification model:
Incoming International Call (carrying a UK +447 number)
│
▼
Can the UK home network verify the SIM is roaming?
/ \
YES NO
/ \
▼ ▼
[ Allow Caller ID ] [ Withhold Caller ID ]
Displays "+447..." to user Displays "Number Withheld"
Automatic ID Withholding: If an incoming call originates from an international network but presents a UK mobile (+447) number, the UK gateway provider must automatically strip away the caller ID and display the call as "Number Withheld" or "Unknown".
The Roaming Verification Bypass: The original, genuine UK caller ID will only be restored if the recipient's home network can securely verify that the customer's actual SIM card is genuinely roaming on an overseas partner network.
Protecting Legitimate Businesses: If a legitimate UK business operates an offshore call centre, they can only present their UK business number if they route their calls through verified, authenticated VoIP or cloud-PBX systems that prove their legal connection to a UK network.
Why This is Highly Effective
While scammers can still physically place the call, they can no longer trick you by displaying a fake, trusted UK mobile number.
Instead, their call will show up on your screen as "Withheld" or "Unknown." Because only 9% of UK consumers say they are likely to answer an unknown or withheld international call, the financial incentive for overseas criminal networks to target the UK is heavily disrupted.
Important: While these measures block a massive portion of automated spam, keep exercising caution with unexpected calls from withheld numbers, and never share security codes or transfer money over the phone.
