Typically, the text message comes in late at night. Many people might ignore it.
“You’re on the phone with your carrier and just authenticated with an alternative method. Not you? Please call us.”
This is what happened to Cody Brown, a software developer and entrepreneur, late one night. He called the number, but his carrier was closed. Eleven minutes later, the attackers had changed his Gmail password. Then his Coinbase password got reset.