What about taking control of the phone number itself? Unauthorized porting can probably be accomplished with a bit of social engineering.