Here in the US, NIST has deprecated the use of SMS as 2-factor auth[1] on the grounds that "there’s a risk that SMS messages can be intercepted or redirected".

[1] https://www.zdnet.com/article/nist-blog-clarifies-sms-deprec...