Regulator
The US regulator for interstate communications. In 2023 it adopted rules requiring wireless carriers to protect customers against SIM-swap and port-out fraud.
Revision 4 keeps SMS codes on the permitted list, with strings attached, and adds synced passkeys as a phishing-resistant alternative. The strings read like a migration plan.
How criminals take over a phone number, why it unlocks so many accounts, and what carriers, banks and customers can do about it.
The 2023 order puts the burden on wireless carriers to authenticate customers before a phone number moves. Here is what it requires, and what it doesn’t.