Fraudsters convince your mobile provider to issue a duplicate SIM, giving them control of your calls and SMS—letting them intercept OTPs and access your accounts.