I’m new to Shopify for my new job. My colleague sent me a Shopify invoice link to send to a customer. When I pasted it into the email and clicked on it to ensure the hyperlink was working, the page automatically sent a two-factor authentication code to the customer’s SMS right away. I didn’t see any login and password page at all. Now, the customer thinks I’m a fraud.
This issue has been plaguing me for the past few days. I haven’t been able to find any articles about someone being able to log into a customer’s account this way. I also saw that the new Shopify Customer account sends one-time login codes to emails but not phone numbers.
Was I unlucky to encounter a bug? Was this working by design? I’m worried that the customer will think I accessed her account again if any of her accounts get hacked in the future