The SIM Swap case in Indonesia has caused significant financial losses for consumers to reach hundreds of millions of rupees. Consumers are often the weakest party in dealing with these cases due to limited capacity, minimal understanding of the law, and shortcomings in existing legal instruments. The study aims to understand how the rights of victims of SIM Swap hacking can be restored and to explore the forms of responsibility of the perpetrators of such crimes. This research covers ways to restore the rights of victims hacked through a SIM card by involving methods of normative- empirical law research. Data is obtained through library studies and analyzed qualitatively. The results of the research show that the restoration of victims' rights involves civil and criminal routes. The Consumer Protection Act and the Personal Data Protection Act provide a legal basis for claiming damages. Criminal tracks are carried out by reporting crimes to authorities, while service providers help secure accounts and phone numbers. As for the penalty against the perpetrators of the hacking, the penalties include imprisonment for up to 6 years and a maximum fine of Rs. 1,000,000,000.00 as provided for in Article 45 (2) of the ITE Act, as well as a maximum penalty of imprisonement of 5 years or a fine of Rp. 2,000,000,000,00 as set forth in Article 62 of the UUPK. Civil liability is also enforced with the obligation to compensate for damages as stipulated in Article 60 (1) of the uupk. This requires increased awareness of the digital security of consumers and service providers need to update and strengthen the security system. The need for effective recovery procedures and quick response is also a focus in handling SIM card hacking cases.