How long will the verification code not be cheated?

Five minutes. The verification code is valid for five minutes. After five minutes, the verification code will be invalid. If you don't do anything within five minutes, such as transfer or payment, there is no problem. As long as it is attacked, the SMS verification code will definitely be intercepted. As for whether it will be stolen, it mainly depends on the risk control of the payment platform, which the user can't control at all.