Phone users at risk as scammers steal numbers to raid accounts