Subscriber identification module (SIM) authentication protections

1. A method for computer authentication of a user request for a Subscriber Identity Module (SIM) card transfer by a biometric signature from a UE, comprising:

assigning a risk score, by a mobile service provider, to a user account based on user activity in the user account, wherein the user activity includes a request for SIM card transfer authorization, wherein the request for SIM card transfer authorization requests a SIM swap from a current SIM card to a swap SIM card;

registering, by the mobile service provider, the swap SIM card to the user account;

in response to the request for SIM card transfer authorization, requesting a biometric signature, by the mobile service provider, from an authentication application executing in memory on the UE;

capturing a biometric signature, by the authentication application, on the UE;

encrypting, by the authentication application, the biometric signature, wherein the encrypted biometric signature comprises a hash;

sending the encrypted biometric signature, by the authentication application, to the mobile service provider, with a wireless communication protocol;

comparing, by the mobile service provider, the encrypted biometric signature to an authorized signature, wherein the authorized signature comprises a previously submitted biometric signature associated with user account;

modifying the risk score, by the mobile service provider, based on comparison of the encrypted biometric signature to the authorized signature; and

in response to the modified risk score being a high risk score, reversing, by the mobile service provider, the SIM swap by deregistering the swap SIM card from the user account, wherein the modified risk score has a high risk score when the encrypted biometric signature does not match the authorized signature.

2. The method of claim 1 , wherein the biometric signature comprises one of a selfie, a face, fingerprint, a hand, or a portion of the face.

3. The method of claim 1 , further comprising:

providing, by the mobile service provider, an application programming interface (API) to a third party, wherein the API enables the third party to access the risk score of the user account.

4. The method of claim 3 , wherein the third party denies the user access to a user account associated with the third party based at least in part on the high risk score assigned to the user.

5. The method of claim 3 , wherein the third party is one of a financial institution, an insurance company, or an investment company.

6. The method of claim 3 , further comprising:

establishing, by the authentication application, a connection to the API by exchanging passwords.

7. The method of claim 1 , wherein the UE is one of a smartphone, a mobile phone, a laptop computer, a tablet computer, a wireless handset, a personal digital assistant (PDA), a gaming device, a pager, a media player, or a computer.

8. The method of claim 1 , wherein the user activity further comprises at least one of a password change, a financial transaction, or a money transfer.

9. The method of claim 1 , further comprising:

transmitting, by the authentication application, location data of the UE to the mobile service provider;

comparing, by the mobile service provider, the location data to stored location data, wherein the risk score is modified based on comparison of the location data to the stored location data.

10. The method of claim 9 , wherein the risk score is a high risk score when the location data does not match the stored location data.

11. The method of claim 10 , further comprising:

sending, by the mobile service provider, the risk score to a third party, wherein the third party denies the user access to a user account associated with the third party based at least in part on the high risk score assigned to the user.

12. A system for computer authentication of a user request for a Subscriber Identity Module (SIM) card transfer by a biometric signature from a UE, comprising:

a user account server comprising at least one processor and at least one non-transitory memory, the user account server configured to:

assign a risk score to a user account based on user activity in the user account, wherein the user activity includes a request for SIM card transfer authorization, wherein the request for SIM card transfer authorization requests a SIM swap from a current SIM card to a swap SIM card, registers the swap SIM card to the user account, and

in response to the request for SIM card transfer authorization, request a biometric signature from the UE; and

an authentication application stored in a non-transitory memory of the UE, that when

executed by a processor of the UE,

captures a biometric signature on the UE,

encrypts the biometric signature, wherein the encrypted biometric signature comprises a hash, and

sends the encrypted biometric signature to the user account server with a wireless communication protocol;

wherein the user account server is further configured to:

compare the encrypted biometric signature to an authorized signature, wherein the authorized signature comprises a previously submitted biometric signature associated with user account,

modify the risk score based on comparison of the encrypted biometric signature to the authorized signature, and

in response to the modified risk score being a high risk score, reverse the SIM swap by deregistering the swap SIM card from the user account, wherein the modified risk score has a high risk score when the encrypted biometric signature does not match the authorized signature.

13. The system of claim 12 , wherein the biometric signature comprises one of a selfie, a face, fingerprint, a hand, or a portion of the face.

14. The system of claim 12 , further comprising an application programming interface (API) provided to a third party, wherein the API enables the third party to access the risk score of the user account.

15. The system of claim 14 , wherein the third party denies the user access to a user account associated with the third party based at least in part on the high risk score assigned to the user.

16. The system of claim 14 , wherein the third party is one of a financial institution, an insurance company, or an investment company.

17. The system of claim 14 , wherein the authentication application, when executed by the processor of the UE, further establishes a connection to the API by exchanging passwords.

18. The system of claim 12 , wherein the user activity further comprises at least one of a password change, a financial transaction, or a money transfer.

19. The system of claim 12 , wherein the authentication application, when executed by the processor of the UE, further transmits location data of the UE to the user account server, wherein the user account server is further configured to compare the location data to stored location data, and wherein the risk score is modified based on comparison of the location data to the stored location data.

20. The method of claim 19 , wherein the risk score is a high risk score when the location data does not match the stored location data.