Hello Security Community
I was wondering if I could please get your input on this strategy. One of the methods used to protect cellular carrier-based/VoIP phone numbers from being SIM swapped (appears to protect VoIP-based numbers as well) is to have a SIM PIN on the profile with the provider.
This appears to be a standard security control on US-issued cellular phone numbers. However, Canada does not have the option to add a PIN to an account to act as a layer preventing SIM swapping.
I currently have access to a VoIP provider that stated they could not add SIM PIN protection to my Canadian-based phone numbers. However, I would be able to add this to US-based phone numbers.
Therefore, because of this difference, would it be better to use a US-based phone number from a VoIP provider over a Canadian-based provider because of the added layer of SIM PIN protection?
The general use case would be to have a phone number only used for financial services and not publicly shared or used for purposes outside of financial services.
Are there any potential downsides using a US-based number could cause, presuming the financial services provider does not block US-based numbers?
Any thoughts or comments are welcome!
Thank you! 😊