I have set up a passcode on my cell phone plan so that supposedly I am safe from someone impersonating me, but I know social engineering is a thing. How feasible is it that someone could pressure workers into skipping the passcode verification for accessing my cell plan over the phone?
VOIP SMS
Previously, M.Bazzle advocated for porting your number to Google Voice so it is protected behind an account name and password (and passkey/2FA if you enable them). You are not using them to call and SMS people and its primary use is to just receive SMS 2FA.
These days I am not so sure. Maybe someone can recommend alternatives?
I used to be with Public Mobile (in Canada) and currently with voipms. In order to port my number I need to reply to an sms within 45 minutes.
Neither of these providers have people to call nor a store to visit. Everything is done through their self-serve portals. No way to social engineer anyone.
With voipms, any criminal would need to get into my 2fa protected account to do a sim swap.