Why Scammers Ask for Your OTP (and Why You Must Never Share It)

Last updated: 2026-06-01

An OTP is a one-time passcode that proves it is really you. That is exactly why scammers want it: with your password plus a code you read out, they can take over an account, approve a payment, or move your money.

Common red flags

Anyone asking you to read out or forward a code
A code arriving that you did not request
Pressure to share the code quickly to 'verify' or 'secure' something
A 'friend' asking for a code they say was sent to you by mistake

Safe next steps

Treat every OTP as private - like a key to your account
Know that banks and real companies never ask you to share a code
If a code arrives unexpectedly, change your password
Turn on app-based two-factor authentication where possible

What not to do

Read a code to anyone, ever
Forward a code by message
Assume a code request is genuine because it looks official

Check a suspicious message

Paste the message to see its specific red flags and what to do next - free and private.

Check a message

OTP scamA scam focused on getting the one-time passcode that protects your account or approves a payment.Account takeoverWhen a scammer gains control of one of your accounts, often using a stolen password plus a tricked one-time code.

Related red flags

Frequently asked questions

Is this kind of message always a scam?

Not always, but the warning signs above mean you should stop and verify through official channels before doing anything. When several signs appear together, treat it as a scam.

What should I do if I already responded?

If you shared details or paid, act quickly: contact your bank or the relevant provider through official channels, change any passwords you entered, and save evidence. See our recovery guides.

Educational guidance only, not legal or financial advice. Examples are paraphrased and simplified.