^ I recommend people contact their mobile provider and add a passcode to their account. I did this a few years back. Any account changes require that passcode to be provided verbally to a customer service rep, which should shut down most SIM-swap attacks.
What's being described above though, that might still go through.