It may be:

Using OTPBins or SeepromBin to intercept SMS messages not intended for you is a felony in most jurisdictions.

It is imperative to state clearly:

App/Website → SMS Gateway → Compromised Signaling Router → Private Dedicated API → Fraudster's Script

Part 1: What is OTPBin? (One-Time Programmable Binary)

Conclusion: Knowledge as Armor

technical analysis

Are you asking for a of how these bots function, or are you concerned about a specific account being compromised?