SIM swap is the simplest of all social engineering hacks. Take over your phone number, change your password ... they are in. Never submit your phone number for 2FA. period.