BAGHDAD — BNT

Iraq’s Communications and Media Commission has renewed its warning to Korek Telecom subscribers, urging them to secure digital accounts linked to their phone numbers before the end of September 2026.

According to the Commission, Korek’s exchanges will be gradually shut down in Baghdad and other Iraqi provinces, resulting in the suspension of services connected to those exchanges.

The shutdown could affect users’ ability to receive calls, text messages and verification codes required to access or recover digital accounts.

Which accounts could be affected?

The warning applies to accounts that use a Korek number for login verification, authentication or account recovery. These may include messaging applications, email accounts, social media platforms and some banking, financial and commercial services.

Users could face difficulty recovering an account after forgetting a password or signing in from a new device if their Korek number remains the only registered verification method.

What should Korek users do?

The Commission advised users to add a number operated by another licensed mobile provider, either Zain Iraq or Asiacell, to platforms that allow more than one phone number.

Users should also update the number used to receive verification and account-recovery messages and confirm that the alternative number is working before the deadline.

Recommended steps include:

Review important accounts linked to the Korek number, including email, WhatsApp, Telegram, social media and financial services.
Add a Zain Iraq or Asiacell number to accounts that support multiple numbers.
Change the recovery number on platforms that allow only one registered phone number.
Add a trusted email address as an alternative recovery method.
Enable an authenticator application where supported instead of relying entirely on SMS codes.
Store account-recovery codes securely and offline.
Test the new recovery methods before the end of September.
Never disclose passwords or verification codes to callers claiming to represent a telecommunications company or government authority.

WhatsApp and Telegram accounts

WhatsApp users should enable two-step verification and add a valid recovery email address. They should also maintain a secure backup of important conversations where necessary.

Telegram users are advised to enable two-step verification, add a recovery email and review active sessions to remove unknown devices.

A disruption to SMS services does not automatically delete an account, but losing access to the registered number can make it more difficult to sign in from a new device or recover the account.

Banking and financial services

Subscribers whose Korek numbers are linked to banking applications, electronic wallets or payment cards should contact their bank or service provider through official channels to confirm the procedure for updating the registered number.

Users should avoid links received through untrusted messages and must not provide verification codes to anyone claiming they can update financial information on their behalf.

Risk of phishing and fraud

Fraudsters may attempt to exploit the announcement by distributing fake links or asking users for passwords and verification codes under the pretext of protecting their accounts.

Phone numbers should only be updated through the official application, website, branch or verified customer-support channels. Legitimate organizations do not normally ask users to disclose passwords or complete verification codes.

Users are not being asked to destroy their SIM cards

The Communications and Media Commission emphasized that the warning does not instruct Korek subscribers to destroy their SIM cards or abandon their existing numbers.

The deadline is intended to give users enough time to protect their digital accounts by registering alternative phone numbers and recovery methods.

What happens after the deadline?

According to the Commission, Korek exchanges will be gradually switched off in Baghdad and other provinces, causing the services connected to them to stop.

The announcement did not provide a detailed shutdown schedule for individual provinces. Users are therefore advised not to wait until the final day to update their authentication and account-recovery information.