Apps & Updates Google Account Carrier caught injecting ‘SMS AD’ into Google verification code message [Update: Comment] SMS is widely regarded as an insecure form of two-factor authentication, and another example of this has just emerged. A carrier looks to be injecting ads into the Google verification code used to sign in to services like Gmail. Update 6/29: Google issued the following statement