It’s also secured through the privacy-enhancing technology of multi-party federated storage. That means the telecom carrier which receive the SMS never has the mapping table between the random code and the venue that only the venue owner have. The venue owner never receive your SMS and indeed learns nothing about you when you check in the venue.