Discourse integration to phone-call system

Not sure if this is really accurate, can believe there is a risk that something like that may happen depending on what kind of a system you are talking about.

Common security system is to send verification code by call or sms to phone for two-factor secure login, have you seen that hijacked for some kind of fraud schemes or how would that happen?

Anyway may go with T-Mobile for setting up official company account, they have some of the most sophisticated scam filtering systems I know of.