I've been sending people this like since 2012: https://www.itnews.com.au/news/telcos-declare-sms-unsafe-for...

"The lobby group for Australian telcos has declared that SMS technology should no longer be considered a safe means of verifying the identity of an individual during a banking transaction."