Hmm.

"just by knowing your victim's mobile number AND e-mail address AND having victim stupid enough to send YOU verification code"