We don't have a reliable way to prevent SIM-swapping attacks that let criminals hijack phone numbers.
open
Global / Unspecified, Global
WS00757
Attackers can sometimes convince phone carriers to transfer a victim's number to a new device, bypassing two-factor authentication tied to that number. Carriers have improved verification, but this attack method remains an ongoing security gap.