What is a verification code and why is it so important?
Six-digit verification codes are a form of two-factor authentication, a process that helps protect your important online accounts. For example, you’ll receive a text message or email with a six-digit code that you must enter when you log into your bank account. This extra layer of protection keeps scammers and hackers out.
Fraudsters know they need these codes to access your accounts, so they may pretend to be someone you trust, such as a representative from your bank or utility company, and ask for the code. If you give them the code, they can log in and access your personal information or money.
Verification code scams can also occur on social media. BBB has previously warned of a Facebook Marketplace scam in which scammers posed as buyers and asked for a seller’s phone number and a six-digit code to “verify the seller is real.” The scammers likely used the phone numbers to set up Google Voice accounts, which they then used for other schemes or identity fraud.
There is no situation where you should give out a six-digit verification code – not even to customer service or technical support. If someone asks you for your code, it’s probably a scam.
More: Phishing scams are on the rise. How to stay safe
How to use verification codes safely:
- Use code immediately and delete it from your texts or emails after logging into your account.
- Never share a verification code with strangers. No one should ever ask you for a six-digit verification code – not a stranger on social media, not tech support, not even your bank. If someone does, end the conversation and block the number.
- Don’t give in to the pressure. It’s a warning sign if someone insists that you give them a code immediately, if they say there’s something wrong with your account, or if they threaten that something bad will happen if you don’t give them the code.
- Contact customer service directly if you believe there is a problem with one of your accounts. Use a phone number you trust, such as the number on a previous bank statement or a verified number from your phone’s address book. Beware of unsolicited messages claiming there’s something wrong with your account.
- Do not give your phone number to strangers. Most social media sites and online marketplaces have built-in messaging features, so you don’t have to give a stranger your phone number to have a conversation or sell something. Never share your phone number in a public social media post.
- Learn about fraud protection policies. Most websites or apps that allow you to chat with strangers (like dating apps, online marketplaces, or vacation booking sites) have scam prevention policies in place—but you lose that protection if you take the conversation elsewhere. Be cautious if someone you just met insists on messaging you through another platform.
- Report. If someone asks you for a verification code, report the conversation to the BBB Scam Tracker. If you believe someone is impersonating your bank or another organization, contact the person at a trusted phone number to let them know. If you encounter a scammer on social media or your account has been compromised, you can report it to the social media platform.
