Filed under: Account takeover

Someone asked me to send them a verification code — is it a scam?

Q: Someone asked me to send them a verification code — is it a scam?

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

Q: someone wants the code texted to me is it a scam

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

Q: is it safe to share a verification code

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

Q: friend asks me to forward an SMS code

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

Q: why would someone need my one time code

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

Yes. Nobody legitimate needs the one-time code that was texted to YOU. “Just forward me the code you got” is how accounts get hijacked — the code is the key to your account, and sharing it hands it over.

The exhibit

EXHIBIT · ACCOUNT TAKEOVER

Received via: SMS EN

Hi, I accidentally sent my verification to your number. Can you please forward me the code you just received? I need it to confirm my account.

Suspicious Worth a closer look

How to verify it yourself

Never share a verification/OTP code with anyone — not friends, not “support”, no one.
Real services print “never share this code” right next to it for a reason.
If a friend asks, their account may be hacked — verify with them another way.
Turn on an authenticator app instead of SMS codes where you can.

Check this message yourself

Or try a real one: