The Threat of Using SMS for Two-Factor Authentication
Text messages are unencrypted and easily intercepted when a duplicate SIM card is issued. Once control over your phone number is gained, the attack instantly bypasses passwords for banking apps and messengers.
Algorithm to Protect Your Phone Number
- Instruct your carrier to prohibit any communication and SIM reissuance without your personal presence and passport
- Switch 2FA codes to authenticator apps (Google Authenticator, YubiKey) instead of SMS
- Set up an additional PIN code for account operations with your mobile provider