04 SMS follows the SIM

Attackers talk a mobile operator into moving your number to their SIM card. Every SMS code then goes straight to them.