Biggest takeaway - if you get a SMS message purporting to be from a bank or company you do business with, go to the business's homepage directly, and not through the link in the text message.
https://arstechnica.com/information-technology/2021/11/securing-your-digital-life-part-3
@0x56 or from your CEO, or anyone really. The SMS phishing has completely gone off the rails.