https://www.theregister.co.uk/2017/05/03/hackers_fire_up_ss7_flaw/ If you get your 2-step verification via text message it is possible, as this flaws shows, that others can redirect your calls and text messages to their phone instead. Meaning they’ll get your 2-step verification code.