It absolutely is an attack. SIM swap is a targeted attack. In a targeted attack scenario, phishing (for id and password) will succeed with high enough probabili

It absolutely is an attack. SIM swap is a targeted attack. In a targeted attack scenario, phishing (for id and password) will succeed with high enough probability. Also, the account recovery path often requires only the phone number, effectively making the recovery phone number as the single factor.