Really don't know how it works. There are many reports of people just clicking one link and the entire phone gets taken over, bank accounts drained.

These days banks have KYC and should know who finally gets the money. Even across borders except perhaps in North Korea etc. for those countries that don't co-operate entire SWIFT system must be blocked.

But for some reason they try other things, blame users but never claw back