In IOS even if you disable notifications from unknown senders, when a TFA code arrives it still shows up for you to paste when you're in an app.