alt Hacker NewsAre you sure it was actually via whatsapp, and not just a six digit code sent via regular SMS to the phone number on record for her account? It's possible whatsapp on her phone has simply hijacked the SMS client functionality and set itself as the default.
Replies
subscribed • today at 2:05 PM
> "WhatsApp on her phone"
GP clearly said she doesn't have WhatsApp.
➕ show 1 reply
alasdairking • today at 4:06 PM
No, my Microsoft Azure 2FA sends codes to WhatsApp, not SMS.
UK, where WhatsApp is absolutely mandatory.
NetMageSCW • today at 1:49 PM
“which she doesn’t have and doesn’t want”
but then amazon would not tell her that she should find the code in whatsapp, because amazon would still be sending send an sms. it should not have any awareness of whatsapp hijacking the sms function, and therefore the amazon message should reference the SMS. if it references whatsapp then it means amazon wants to send to whatsapp directly.