> My grandmother almost told her SMS 2FA to some scammer on the phone claiming to be from her bank. If they asked her password she would have immediately understood the scam.
For a second factor to be useful, they would already have to have her password.
For a second factor to be useful, they would already have to have her password.