we noticed that the messages are in plain text format and readable @ sms provider portal, which is vulnerable.

SMS should be encrypted @ SMS Provider and the end user should receive msg decrypted or any such mechanism to safeguard the user credntials.

I have tried the encode msg option in SMS Settings but no luck.,,, 

any suggestions would be appreciated.