There should be OTP verification when user adds/links Mobile number to Profile later. So that User would not able to add fake or wrong number.