I suggest to have a magic link sent through WhatsApp for authentication.
There are two approaches.
__Approach 1:__
1) User chooses WhatsApp a method to sign-in
2) redirected to whatssap, with a message "sign-in" ready to be sent to bot
3) once sent by the user
4) the bot replys back with a magic link to sign-in
__Approach 2:__
1) User chooses WhatsApp a method to sign-in
2) User enters his whatsapp number
3) User recieves a magic link to sign-in