Every few weeks someone in a privacy chat asks whether an "encrypted SIM" will make their phone untraceable. Short answer: no. Longer answer: it can close some real gaps, but only if you know which gaps you actually have.
Quick disclosure before we start: I work on Ghost SIMs, so I spend a lot of time explaining this stuff to customers. I've tried to keep this post vendor-neutral.
First, the three identifiers people mix up
Your phone talks to the network using a handful of IDs, and they live in different places:
- IMSI (International Mobile Subscriber Identity). Lives on the SIM. It identifies your subscription to the carrier's core network. In 5G standalone it's called the SUPI and is sent encrypted as a SUCI, but on 2G/3G/4G it can still be requested in the clear in some situations.
- ICCID. The serial number of the SIM card (or eSIM profile) itself. Used for billing and provisioning.
- IMEI. Lives in the phone, not the SIM. It identifies the handset. The network can ask for it, and carriers check it against stolen-device lists.
The practical takeaway: if you put a brand new SIM into the same old phone, the network can still link the two via the IMEI. Swapping SIMs changes one identifier, not all of them.
What an "encrypted SIM" usually means
"Encrypted SIM" is a marketing phrase, not a 3GPP standard. The radio link between your phone and the tower is already encrypted on modern networks (keys are derived from a secret, Ki, stored on every SIM). So when a provider says "encrypted," they usually mean some mix of:
- Less identity linkage. No ID upload at signup, or no name tied to the subscription.
- Roaming or multi-IMSI profiles. The SIM presents a different home network, so your local carrier sees a roaming visitor instead of a local customer with a contract.
- Data-first usage. Calls and messages go through end-to-end encrypted apps instead of the carrier's SMS and voice systems.
That's useful. It's also very different from "nobody can see anything."
Threat 1: SS7 and SMS interception
SS7 is the decades-old signalling system carriers use to talk to each other. It was built on trust between operators, and that trust has been abused: researchers and journalists have shown location lookups and SMS rerouting through it for years. Diameter, its 4G successor, has similar problems.
What this means for you:
- SMS 2FA is weak. Anyone who can reroute or SIM-swap your number gets your codes. No SIM product fixes that, because the weakness is in SMS itself.
- Fix: move important accounts to TOTP apps or hardware keys (FIDO2/passkeys). Do this today, whatever SIM you use.
Threat 2: IMSI catchers (fake base stations)
An IMSI catcher pretends to be a cell tower. Phones nearby connect, hand over their IMSI, and on 2G the attacker can force weak or no encryption.
What actually helps:
- Turn off 2G. On Android 12+ (Pixels and many others) it's under Settings > Network & internet > SIMs > Allow 2G. Most downgrade tricks rely on 2G.
- Prefer LTE/5G-only modes if your OS offers them. GrapheneOS has an LTE-only option, for example.
- A roaming or multi-IMSI SIM can make the identifier a catcher grabs less useful, because it doesn't map neatly to your name. It doesn't stop the catcher from seeing that a phone is there.
Threat 3: What the network still sees, no matter what
This is the part people skip. Even with a no-KYC, roaming, "encrypted" SIM, the network you're attached to can still observe:
- Rough location, from which towers you're attached to and the signal timing.
- When you're online, and how much data you move.
- Your IMEI, if it asks.
- Destination IPs and DNS lookups, unless you use a VPN or encrypted DNS.
- Carrier SMS and normal voice calls, which are not end-to-end encrypted.
If your threat model includes "a mobile operator, or someone with legal access to one, must not know where I am," a SIM alone can't give you that. Location comes from physics, not paperwork.
Where the OS and apps fit in
The SIM is one layer. Most of the real protection happens on the device:
- App-level E2EE. Signal (or similar) protects message content from the carrier entirely. Metadata still exists, but the carrier only sees encrypted data going to a server.
- A hardened OS. GrapheneOS adds per-app network and sensor permissions, a hardened memory allocator, auto-reboot to push the phone back into its locked, encrypted state, and sandboxed Google Play so apps can't grab privileged access. It won't hide your IMEI from the network, but it cuts down what apps can leak, and that's often the bigger risk. If you're curious how that combo looks in practice, here's our write-up on why GrapheneOS-based encrypted phones are worth it.
- VPN or encrypted DNS hides which services you're talking to from the local network.
A checklist you can actually use
Write down your adversary first, then pick from this list:
- Account takeover via SMS? Move to TOTP or passkeys. Remove your phone number as a recovery method where you can.
- Data brokers linking your number to your name? Use a separate number or a no-KYC SIM for signups, and keep your real number for people you trust.
- Nearby IMSI catchers? Disable 2G, use LTE/5G-only, keep the baseband updated.
- Carrier reading your messages? Stop using SMS for anything sensitive. Use an E2EE messenger.
- Apps leaking location and identifiers? Lock down permissions, or run a hardened OS.
- Linkage across SIMs? Remember the IMEI. A fresh SIM in an old phone is not a fresh identity.
- Physical location tracking by the network? No SIM fixes this. Airplane mode, or leave the phone behind.
If you want a longer walkthrough of choosing and setting up a SIM with these trade-offs in mind, our secure SIM card guide goes step by step.
The takeaway
An encrypted or privacy-focused SIM is good at one thing: weakening the link between your subscription and your real identity. It's not an invisibility cloak. Pair it with app-level encryption, a sane OS, and no SMS-based 2FA, and you've covered most of what normal people actually face. Skip those, and the fanciest SIM in the world is just a SIM.
What's in your mobile threat model? I'm curious what people here are actually defending against, so drop it in the comments.
Top comments (0)