Never share the code. Not with your bank, not with anyone.
The 6-digit code that just arrived on your phone is a key. Anyone who asks you for it — bank, courier, official, 'support agent' — is trying to open a door you'd never voluntarily open.
This is a second opinion, not a verdict. We never say a message is safe. If anything matches what you saw, slow down and verify before sending money or sharing codes.
+1 (***) *** 3148
SMS · Today · 17:21
What this scam is, in plain words
An OTP — one-time password, SMS code, authenticator code — is the second factor that proves it's you logging in or approving a payment. The whole system depends on you never giving it to another person.
If someone asks you for that code, no matter how official they sound, they are trying to log in as you or move your money. Read the SMS itself: it usually says 'do not share this with anyone'.
Warning signs
If two or more of these show up at once, slow down.
- Someone — even claiming to be from your bank — is asking for an OTP / verification code.
- The code arrived without you requesting it.
- The caller is talking you through 'verifying your identity' over the phone.
- They want it 'urgently' so the code doesn't expire.
- They sound calm and professional — scammers train for this.
What to do now
Calm steps you can take in the next two minutes.
Don't
- Don't read the code out loud, type it into a chat, or paste it on a website they sent you.
- Don't trust caller ID or email sender names — both can be spoofed.
- Don't worry about being rude. Hang up.
Do
- If you didn't request the code, change the password on that account immediately.
- Call your bank using the official number on your card if anything feels off.
- Turn on app-based authentication (Authenticator apps, security keys) where available — they're harder to phish than SMS codes.
One last reminder. We never say something is safe. We surface signs to help you pause and verify. If anything looks off, talk to one person you trust before sending money or sharing codes.
Related guides
Same playbook, different cover story.
Fake bank call
Fake bank call: real banks never ask for these.
Someone calls or messages saying your account is at risk and they need to 'protect' it. The moment they ask for a code, password, or to install an app — it stops being your bank.
Read the guideWhatsApp scams
WhatsApp scam — same script, different number.
Most WhatsApp scams reuse a small set of patterns: impersonating someone you know, offering easy money, promising prizes, or pretending to be a bank. Once you see the patterns, you can spot them in seconds.
Read the guideStart here
Is this a scam? Pause before you pay or share.
If you feel rushed, isolated, or asked to pay before you receive anything — pause. That feeling is usually right. Take two minutes to check it properly.
Read the guideNot sure yet? Check the message before you reply.
Paste what you received. We'll point out the signs and tell you what to verify — before you reply, click, or send anything.