Red flag

Verification code request

Someone asks you to share or forward a verification or login code that was sent to your phone or email.

Why it matters

That code is the key to an account or a payment. Sharing it lets a scammer log in as you or approve a transaction.

Example only - do not act on it

Example only: I accidentally sent my code to your number - can you forward it back? [code removed]

Why scammers use this

It's the fastest way to hijack an account or authorise fraud without your password.

What to do

Never share or forward a one-time or verification code - it is for you alone.
If you shared one, change the password and turn on app-based two-step verification.
Tell your bank if the code related to a payment or login.

What not to do

Don't share codes with anyone - not 'support', not a 'friend', not a buyer.
Don't believe a code was 'sent by mistake'.
Don't reuse passwords across accounts.

How to verify safely

Genuine codes are for you to enter yourself; no bank, platform, or real contact ever needs you to read one out. If unsure, log in via the official app and check.

Scams where this appears

Related message checks

Related scam-type hubs

Emergency guides

Related terms

Not sure about a message?

Paste it into the checker for a private, plain-English risk check. Your message stays in your browser.

Check a message

Frequently asked questions

Is a code ever safe to share?

No. A code sent to you is for you to enter yourself. Anyone asking you to share it is trying to take over your account.