ImpersonationReviewed 18 August 2026

Verification-code theft

Someone who already has your password tries to persuade you to reveal the second code needed to enter your account.

WHY IT WORKS

The hook

The request is wrapped in a believable story about fraud prevention, identity checks, a sale, or account recovery.

WHAT THEY WANT

The endgame

Taking over an email, banking, social, marketplace, or payment account.

WHAT TO NOTICE

Three repeating signals

01
A person asks you to read back a code
02
A code arrives when you did not try to sign in
03
They claim the code proves your identity to them

IF YOU ALREADY ACTED

Move quickly, without panic

Change the password immediately
Sign out other sessions where the service allows it
Contact the service or financial institution through its official channel

Recovery depends on the payment method and circumstances. Contact the relevant bank, platform or local authority using independently verified details.