It seems to be easier than ever to spoof IP addresses, so blacklisting by IP no longer works well, and AI can solve captchas faster than humans.
What is crazy with the spoofing, is when they are able to use the "same number" as legit company numbers so it appears in the same chain of SMS. Like, what the hell?