OTP scam
Quick answer
A scam focused on getting the one-time passcode that protects your account or approves a payment.
- Never share a one-time code with anyone. If one arrives unexpectedly, change your password.
What it is
A scam focused on getting the one-time passcode that protects your account or approves a payment.
How it works
The scammer triggers a real code to your phone, then persuades you to share it under a pretext, completing a login or transaction.
Red flags to watch for
- A code you did not request
- Anyone asking you to read out or forward a code
- A 'friend' saying a code was sent to you by mistake
- Urgency to share it quickly
What not to do
- Do not act under time pressure
- Do not share codes, passwords, or card details
- Do not click links or pay fees from the message
The safe next step
Never share a one-time code with anyone. If one arrives unexpectedly, change your password.
Often seen on: SMS, Email, WhatsApp, Social media.
Commonly targets: Bank and messaging-app users, Anyone with online accounts.
How to verify safely
- Do not use links, phone numbers, QR codes, or email addresses from the suspicious message.
- Open the official app or website yourself - type the address manually.
- Call a contact you have saved, or the number printed on your bank card.
- If you are threatened or in immediate danger, contact local emergency services or police.
How to report it
Report to your country's fraud or cybercrime authority; see the reporting directory for official links.
Find official links for your country in the scam reporting directory.
Got a message like this?
Check it now to see the specific red flags and what to do next.
Check a messageRelated scam types
Frequently asked questions
What is an otp scam?
A scam focused on getting the one-time passcode that protects your account or approves a payment.
How can I avoid an otp scam?
Never share a one-time code with anyone. If one arrives unexpectedly, change your password.
What should I do if I have already been affected?
Contact your bank or the relevant provider through official channels, change any exposed passwords from a trusted device, and save evidence. See our recovery guides, and be wary of recovery scams that promise to get your money back for a fee.