The SMS bill nobody planned for: when a signup form sends a code to any number typed in

If your signup form sends a one-time code by SMS, you have built a button that spends money on behalf of whoever presses it. Most of the time the person pressing it wants to sign up. Sometimes they wa