Verification code scams: “just read me the code”
Someone asks you to share a one-time code that was just sent to you.
Could you spot it?
3 quick examples. Decide scam or legit for each.
How it works
The code that arrives by text or email is the key to your account. Scammers trigger a sign-in or password reset on your account, then contact you with a reason to read the code back: they're your bank's fraud team, a buyer who wants to “verify you're real”, or a friend whose account is locked.
Sometimes the “friend” is a hacked account messaging everyone on their contact list.
Red flags
- Anyone asking for a code, however good the reason.
- A code arriving for a sign-in or reset you didn't start.
- A friend's message that sounds a little off and asks for a code or a favor.
What it looks like
You listed a stroller for sale online and included your phone number. A buyer texts you.
The tells:
- Turning your caution against you: “I just want to know you're real.”
- Asking for a code sent to your phone.
A training example written for this site. Names, numbers and links are made up, and links are disabled.
What to do
- Never share a verification code with anyone who contacts you. Companies don't ask for them.
- If a code arrives unexpectedly, change that account's password yourself.
- Call your friend on a number you know before helping with their “locked” account.
If you already paid or shared information
- Contact the company you used to pay (your bank, card company, gift card company, payment app or wire service) right away and ask them to reverse the payment.
- If you shared a password, change it now and turn on two-factor authentication.
- If you gave out your Social Security number or other ID details, go to IdentityTheft.gov for a recovery plan.
- Report it to the FTC at ReportFraud.ftc.gov. For scams that happened online, you can also report to the FBI at ic3.gov.
From FTC: What to do if you were scammed.
Latest alerts about this scam
No recent FTC, CISA or FBI alerts are tagged with this scam. The guidance below still applies.
Sources
- FTC: What's a verification code and why would someone ask me for it?
- FTC: The Google Voice scam: how this verification code scam works
Related scams
Account alert phishing
An email or text says your account is locked, suspended or about to expire, and links to a sign-in page.
QR code scams
A QR code on a parking meter, flyer, letter or unexpected package leads to a fake payment or login page.
Prize and sweepstakes scams
You've won a prize, but you have to pay taxes, fees or shipping before you can collect it.