NoScams
What to do if you gave a scammer a verification code
Updated October 23, 2026
Assume the scammer is trying to get into that account right now. Change the password, sign out of every other device, check the recovery email and phone number, and call the company using a number you trust. The FTC puts it simply: anyone who asks for your verification code is a scammer.
Do this first
- Change the password for the account the code was for, on the real website or app (type the address yourself).
- Sign out of all other devices and sessions. Most accounts have this under security settings.
- Check the recovery email and phone number. Scammers often change them so they can lock you out later.
- Check for changes you didn't make: email forwarding rules, new linked devices, new payment methods, or new payees.
- Turn on two-factor authentication, ideally with an authenticator app or passkey, if it wasn't already on.
If you can't sign in, use the company's account recovery steps right away. These are the FTC's steps for a hacked account. The FTC has no separate checklist for a shared code, but the account should be treated the same way.
If it was your bank or a payment app
Call the bank or app using a number from your card, statement, or the official app. Tell them you shared a code and ask them to lock down the account and reverse anything you didn't authorize.
If it was your Apple Account
Change your Apple Account password right away and make sure two-factor authentication is on. Apple says it never asks for your password or verification codes to provide support, so anyone who did was not Apple.
If it was Google Voice
The FTC describes a scam where someone asks for a code "to verify you're real," then uses it to create a Google Voice number linked to your phone number. Follow Google's steps to reclaim your number, and report the scam to the FTC.
Watch for a SIM swap
The FCC warns about port-out scams, where someone moves your phone number to their own phone so they receive your verification texts. If your phone suddenly loses service, or your carrier tells you about a change you didn't make, call your carrier right away. Many carriers let you add a port-out PIN or lock.
Report it
Report it to the FTC at ReportFraud.ftc.gov, and forward the original text to 7726. If money was taken, also file at ic3.gov.
Questions
Why do scammers want the code?
A verification code is the second lock on your account. With your password, or with the code alone on some accounts, it lets the scammer sign in, reset your password, or approve a payment.
The code was for my bank. What now?
Call your bank immediately using the number on your card, your statement, or the bank's app. Tell them you shared a code, and ask them to secure the account and check for transfers you didn't make.
I shared a Google Voice code. What happened?
Scammers use your code to set up a Google Voice number tied to your phone number, then use it for other scams. The FTC has steps for reclaiming your number from Google.