1. physical access to SIM-card to get the IMSI
2. info on bank account / phone number
3. hacking in PC/internet connection to determine if/when the code is used.
4. raise no suspicion when a code is sent and not received by the original recipient, and recipient is not able to call/being called or send/receive text because the original phone will be blocked until it is paired again with the GSM-system (power cycled)
5. you need to have a bank that does have this system. (mine does not)

so not as viable as it looks.

when you quote, please quote literal, including errors.

But... you are not allowed to publish the images when a (any) person who is recognizable on the picture has any objections to such publication, and you are required to remove such pictures when requested.