Supplier switching is the process of moving a customer account from one service provider to another. In utilities, telecoms, and other recurring-service markets, the switch usually involves identity checks, authorization, and the transfer of billing and contract details. In cyber security, this matters because the switch process can be targeted for account takeover, identity fraud, or unauthorized changes to a customer’s service relationship.
Attackers may use stolen personal data, phishing, or social engineering to impersonate a customer and trigger a switch without consent. They may also exploit weak verification steps to redirect invoices, disrupt service, or obtain new account access. Defenders reduce this risk with strong customer authentication, out-of-band confirmation, change notifications, audit logging, and careful review of unusual requests. Monitoring supplier-switch workflows is important because they often combine valuable personal data with business processes that are designed for convenience, not security.