Oh no. It actually worked.

So if you want to hack into someone’s Target account and are asked to provide a One time Passcode texted to a phone number, just try NO_TOKEN