You would have to share your phone which you are probably less likely. Scanner doesn't need to know who the code was generated for only if this is a legit autho

You would have to share your phone which you are probably less likely. Scanner doesn't need to know who the code was generated for only if this is a legit authorized app - it's easy to check if this is a real app with some challenge-response instead of one way-communication