Can you post the SMS opt-in message you received? Curious as to whether this is exploitable as well
That is what I was sent.
"FirstName LastName wants to obtain your location..."
Also betting that you can put 160 characters into those fields, so effectively a blank SMS is received
Betting further still that you can just spoof the SMS reply