So apparently, scammers can social engineer your phone carrier to transfer your phone number to their SIM card over the phone pretty easily. Then they can get into your email account and anything you have your phone as a 2 factor password recovery method and completely fuck you over.