Nerd Wallet: In 'SIM swap,' criminals really have your number