The US National Institute for Standards and Technology draft guidelines state that SMS is not secure enough for authentication purposes.
Source: CNet