Someone missed that day of 5th-grade English, when this was explained!
To ask, "Says whom?" would be completely ungrammatical.
Whom is the Dative or Accusative form of who. (Whose is the Possessive form.)
After all, you wouldn't ask "Says him?", would you?
Regards,
I learn new stuff every day.
How ‘bout you?