Hang Up First
Browse all
Being pressured right now? Hang up. Call back using a number you find yourself. →

Someone wants a verification code

You receive a text or call asking you to read back a one-time passcode, security code, or "verification code" that was just sent to your phone.

Being pressured right now?

Hang up. Stop communicating. Call back using a number you find yourself. — from a bank card, a billing statement, or the official website you type in yourself. Do not use a number the caller gave you, texted you, or that appears on your caller ID.

If you read nothing else

If you read nothing else:

  • Stop communicating, and do not move money, pay, or share codes while you are under pressure.
  • You are asked to read a one-time code out loud or type it into a message.
  • Do not read a verification code to anyone who calls or texts you, even if they claim to be from a company you use.

Why this is a red flag

You are asked to read a one-time code out loud or type it into a message.

A real company already has the code; they generated it. Anyone asking you to repeat it back is trying to use it to get into your account.

You receive a code you did not request.

This usually means someone already has your password and is trying to log in, triggering the code to your phone instead of theirs.

The request is paired with urgency, like a "locked account" or "suspicious login" warning.

Scammers pair the code request with a reason that sounds official so you act fast instead of pausing.

What to do right now

Do this now

  • Do not share the code with anyone, for any reason.
  • If you did not request the code, change the password on that account using the official app or website.
  • Turn on additional account security (like an authenticator app) if the service offers it.
  • Contact the real company directly through its official app or website if you are unsure what triggered the code.

What not to do

Don't do this

  • Do not read a verification code to anyone who calls or texts you, even if they claim to be from a company you use.
  • Do not enter a code into a link sent to you by text or email.
  • Do not assume a caller is legitimate because they already know your name, address, or part of an account number.

What to save

What to save

  • A screenshot of the code text and any message asking for it.
  • The phone number or account the request claimed to come from.
  • The date and time you received the unsolicited code.

Common questions

Why would someone ask me for my verification code?

They are trying to log into one of your accounts using your password, and your code is the last thing standing in their way. A real company already generated the code; it never needs you to read it back.

Is it ever okay to share a one-time code?

No. Do not share a verification code with anyone who calls or texts you, even if they already know your name, address, or part of an account number.

What do I do if I already gave out my code?

From a trusted device, change the password on that account right away using the official app or website, and turn on extra security like an authenticator app if it is offered.

Someone is trying to log into my account — what does that mean?

It usually means someone already has your password and is trying to get in, which triggers a code to your phone instead of theirs. Change your password and do not share the code.

Where to go next

If you already sent money, shared a code, or gave access to something, go to what to do now for next steps by what happened. If money, access, or personal information was shared, you can also go straight to where to report it.

Related situations: Someone wants me to move my money , Someone wants gift cards, crypto, or cash .

Last reviewed: 2026-06-30

Sources