True, but possession per se, even if unauthorized, is what a "something you have" factor is all about. Adding a knowledge or biometric factor on top (your phone's unlock mechanism) is a bonus.

Granted, the unauthorized porting issue makes it a faulty possession factor in the first place.