Scam library · Texts · Banking & payment apps
Verification code scam
You get a text with a 6-digit code you didn't request. Then a message or call: 'Sorry, I sent my code to your number by mistake. Can you send it to me?' Or a 'bank' calls and asks you to read the code to verify your identity.
That code is the key to your account. Whoever has it can log in, reset passwords or send money.
It doesn't matter how friendly or official the person sounds. A code that arrives on your phone is for you alone.
What the message looks like
From: +1 (510) 555-0136
Your verification code is 482911. Don't share this code with anyone.
Hi! I accidentally put your number in when signing up. Could you send me the code? Thanks so much!
How this scam works
Scammers use this to take over WhatsApp, Google Voice, email and bank accounts. With Google Voice, they create a number linked to yours to use for more scams.
Bank impersonators trigger a real login or transfer, then call pretending to be your bank's fraud team and ask you to read the code. They're actually logging in or authorizing a payment.
Real companies say in the text: 'Never share this code.' They mean it.
If you get unexpected codes, it often means someone already has your password and is trying to get past the second step. That's a good moment to change the password for that account and check its security settings.
Red flags
- Anyone asking for a code sent to your phone.
- A 'mistake' story about using your number.
- A caller from your bank asking you to read a code.
- Codes you didn't request.
- Urgency.
How to tell it’s fake
- Read the code message: it usually says what it's for and not to share it.
- Hang up and call your bank directly using the number on your card.
- Treat unexpected codes as a sign someone is trying to access your account.
- If someone says they used your number by mistake, they can request a new code to their own number. They don't need yours.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Don't share the code. Change the password for the account the code was for.
If you paid
- If money was moved, contact your bank right away.
If you shared personal info, a password or a code
- If you shared a code, secure the account: change password, sign out other sessions and enable stronger two-step verification.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard in Chrome and Edge on your computer checks messages you have open in the browser, like Google Messages for web or WhatsApp Web. It recognizes 'send me the code' requests and fake bank pages, and warns before you share. If a request seems legit, ask a scam expert first.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Can someone hack me with a verification code?
- Yes. The code lets them finish logging in or confirm a change.
- My bank called and asked for the code. Is that real?
- No. Hang up and call your bank directly.
- Why am I getting random codes?
- Someone may be trying to log in. Change your password.
- What's the Google Voice code scam?
- Scammers use your code to create a Google Voice number linked to your phone.