Both Android and iOS try their best to detect the code and prompt you to use it, but all these messages are different and nonstandard; some even include multipl

Both Android and iOS try their best to detect the code and prompt you to use it, but all these messages are different and nonstandard; some even include multiple code-looking strings, like a transaction reference for logging purposes. So both OSes fail at it very regularly. Things would be easier if 2FA systems agreed on a common format that can be semi-automated better. Which again is probably something that will never happen unless authorities step in.