From 222ffb25bb988aea6f48a462b06d1f721b5c7f4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tantek=20=C3=87elik?= <blog@tantek.com>
Date: Thu, 3 Oct 2024 10:17:22 -0700
Subject: [PATCH] Falsehood: Phone numbers are more secure than email

Phone numbers are less secure than email due to simjacking.
---
 FALSEHOODS.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/FALSEHOODS.md b/FALSEHOODS.md
index 83b0778ef..5490e0926 100644
--- a/FALSEHOODS.md
+++ b/FALSEHOODS.md
@@ -274,3 +274,8 @@ surprising how many false assumptions programmers continue to make about them.
     in the event of an alarm activation then automated voice messages can be
     played on the device via telephony APIs, or a human may call the device
     directly (potentially also via a telephony API).
+
+1. **Phone numbers are more secure than email**
+
+   Phone numbers tied to SIM cards are more vulnerable than email due to
+   [Simjacking](https://en.wikipedia.org/wiki/SIM_swap_scam).