Duress PIN and SIM card lock

onehalf3544

Will the (physical) SIM-card be locked (by "entering" wrong SIM PIN 3 times or by some other method) if duress PIN is entered?

The concern is that if someone is forced to unlock a device (and therefore would wipe it by entering duress PIN), then an attacker might as well have physical access to the device and would simply remove the SIM from the wiped phone and install it into another phone (after 'getting' the SIM PIN from the owner).
After that getting access to any banking app is a matter of receiving an SMS/voice call to that phone.

Forcing sim block (so that PUK is required, which isn't something that people remember, so can't give out even under duress) seems like an option to protect against such scenario.

Or do I miss something?

Thanks.

Nobody

onehalf3544

ESIM solves this. Regardless even with physical sms they are not getting into bank app without the passphrase and to use the on file email address to reset they again need that info and login creds all of which would be wiped from the phone.

I do not have a single account that I have that could be accessed solely by a TOTP Pin. You need the pwd and login in name or account number. With a phone grab with duress pwd or proper login security they are not accessing that. If you are using proper high entropy generated pwd using a pwd manager you will not have any of this info to give. The phone being wiped I am not seeing the issue with your presented scenario. Not to mention as soon as you can get to a phone your sim will be locked by your provider. Beyond that with a pin locked sim they first have to reset that and have very limited time and at most are getting access use to your account for a very short period of time but nothing else. And again ESIM removes even this limited use.