Someone Asked for Your Verification Code? It Is a Scam

If anyone asks you for a code you received, it is a scam: the code lets them take over your account or use your number. Here is what to do.

How the scam works

A stranger, often replying to an online sale or a post, says they need to "verify you are real" and sends a code to your phone. In fact they are signing up for a service, such as a calling app or a messaging account, using your number. When you read the code back, the account or number becomes theirs.

Versions to watch for

• "I sent you a code to check you are not a bot."
• "A friend" messages you from a hacked account asking for a code "sent by mistake".
• A caller claiming to be from a delivery firm, a shop or the app itself.

If you already shared a code

1. Open the app the code was for and change your password.
2. Turn on two-step verification with an authenticator app.
3. Sign out of other sessions in the security settings.
4. If it was a messaging app, warn your contacts that messages from you may be fake.
5. Report the scammer on the site where you met them.

The rule

Codes are for typing into the app yourself, never for reading out. No real company, buyer or friend needs one.

Selling online safely

• Keep conversations inside the marketplace's own chat.
• Never move to a messaging app just because a buyer asks.
• Prefer collection in person or the marketplace's payment system.
• Treat anyone who sends you a code and asks for it back as a scammer, however friendly they seem.

FAQ

Can someone hack me if I give them my code?

Yes. The code lets them finish signing in or registering with your number.

What if a friend asks for a code?

Their account may be hacked. Call them on another channel before doing anything.

Should I reply to the scammer?

No. Block and report them.

Related: unrequested WhatsApp codes · fake verification texts · codes you did not request.