Microsoft is scrapping SMS 2-factor authentication because it's "a leading source of fraud"

Microsoft is eliminating SMS-based two-factor authentication for personal accounts, citing it as a leading source of fraud and a major attack vector. The company is shifting users toward passwordless options including passkeys and verified email verification. This move aligns with Microsoft's broader push to remove passwords from new accounts by default, aiming to improve both security and user experience.