i just got off a DM with TMo support. they officially don't have a way for you to block this. Sucks considering they are the best of the worst. Every Tmo customer is in danger of having their identity stolen.
I haven't heard of a 'do not port' instruction, but you can call T-Mobile and add an additional password that will be required before customer service will service your account.
How do I do this for my cell provider (T-Mobile USA)?