Use Google Authenticator, Microsoft Authenticator, or VIP Access for MFA instead of SMS messages, which are still prone to vulnerability.

But as long as you use SMS messages - how about just having numerals instead of letters?

Thanks.