Comment by rothron

His first mistake was to read back the verification number? Why would they legitimately asked for this theoretically?

To verify he has the phone they just called him on?

You should never have to read back a verification code.