Thanks for your detailed breakdown.

I can confirmed from the OTP sent to her phone is on telegram.

But after a day, there are two more verification code sent to her telegram. But those two I not sure is verify for what services as it just written down verification code.

She lost her WhatsApp account during we were sleeping. Because last online was about 1.30am and she found out the WhatsApp has been logged out at about 5.30am when wake up.
I never know for such feature like sandbox from Samsung. Really good to know, thanks for your sharing.

Do you know any feature that can enhance security on iPhone ecosystem?
She gave out OTP at 4.30am Tuesday and hacker gain control of her account for about 48 hours. But she only lost her WhatsApp today 3am.

I did see she received verification code twice on telegram. But not sure the verification code is for what
Is it possible they hack through call?

Because usually I just pick up any calls as we’re working and sometime new client would call up for potential deal.