> Whenever I get phishing SMS they always come from a random 10-digit phone number so it's pretty clear they're scams Sadly, Novant Health (a hospital system)

> Whenever I get phishing SMS they always come from a random 10-digit phone number so it's pretty clear they're scams Sadly, Novant Health (a hospital system) uses a regular 10-digit number for their patient portal 2FA. When I was in college, accessing sensitive info like your SSN and W2s in Banner also had 2FA via a 10-digit number. (This was an entirely separate system from the login 2FA provider, Duo, which uses shortcodes in addition to U2F tokens and their app.)