Riyadh – A growing number of Saudi users are encountering security problems after receiving mobile numbers that were previously assigned to other subscribers. The Saudi Communications and Space Authority’s National Numbering Plan mandates a three‑month “hold” period before a number can be re‑issued, extending to at least four months if the original owner complained about spam. Despite these safeguards, the reuse of numbers is still exposing personal data and digital accounts.

Snapchat’s official support channel disclosed that a new subscriber can inadvertently log into the former owner’s account if the latter has not enabled additional security measures, such as two‑factor authentication. The platform does not keep precise records of when telecom companies recycle numbers, so users may unknowingly gain access to a previous profile.

WhatsApp, on the other hand, clarified that while a recycled number may display the former owner’s profile picture or basic information, past conversations are not automatically transferred. The messaging app relies on its own encryption and backup mechanisms, which remain tied to the original user’s account credentials.

Technical expert Iyd al‑Zakri highlighted the broader implications: “Recycled numbers can trigger unwanted messages from banks, government services, or any platform that uses the phone number for account recovery. Users may also receive debt collection notices that do not belong to them.” He warned that the problem goes beyond nuisance calls; it can affect accounts that store financial data, payment methods, or personal identifiers.

Cyber‑security consultant Asaf al‑Asaf warned that some services still permit password resets through a verification code sent to the phone number alone. If a number changes hands, an unauthorized user could potentially regain access to an active account, especially when the service does not require supplemental identity checks.

A 2021 study by researchers at Princeton University examined 259 recycled numbers from two U.S. carriers and found that 171 of them were still linked to at least one online account on popular websites. Although the study does not represent Saudi statistics, it underscores the global nature of the issue.

The National Numbering Plan requires telecom operators to inform users when a recycled number may cause inconvenience and to submit semi‑annual reports to the regulator detailing numbers that have been reclaimed and re‑allocated. However, the end of the hold period does not automatically remove the number from existing digital linkages; each service must handle the disassociation individually.

Both al‑Zakri and al‑Asaf advise users to review all services tied to their mobile number before relinquishing it. This includes updating contact details for email, banking, government portals, and messaging apps, and enabling multi‑factor authentication wherever possible. New owners who discover that their number is already associated with another user’s account should contact the service provider directly rather than attempting to log in.

The experts also call on app developers to move away from using the phone number as the sole identifier and to adopt additional verification methods, such as authenticator apps or hardware security keys, to mitigate the risks linked to number recycling.

Sources (learn more):

alwatan.com.sa — https://www.alwatan.com.sa/article/1188759