[mothered]

You forgot to mention to delete the verification code that was sent to the victim's phone. That alone, Is an Instant failure.

On the above grounds and also what's documented In the tutorial, particularly the timing of the compromised account, the methodology Is too obvious. It won't be too difficult pinpointing how and who hacked the account.

Nonetheless, using your guide and manipulating It In a more appropriate method, can be of benefit.
Thanks.