A message or a call that asks you for a code, or to approve a sign-in you didn't start. A code can let someone into your account, even on the real website.
Text Message
Hi, I sent my verification code to your number by mistake. Can you send it back to me?
On this page
Text Message
Hi, I sent my verification code to your number by mistake. Can you send it back to me?
The caller says
“This is your bank's fraud team. To stop the payment, read me the code we just sent you.”
Are you trying to sign in?
… and then
From to me
IT support: please approve the request so we can fix your mailbox.
Examples. The names and amounts change; the shape doesn't.
Someone asks for a code that was sent to you. A code is a key: with it, they get in or approve a payment.
A sign-in request you didn't start, maybe many in a row, until you tap Approve to make them stop.
“Read me the code to cancel it.” A code can't cancel a payment or prove who you are to a caller.
The code's own text says not to share it. Read the text the code came in.
A file or some text “so we can check your account”. A file saved from your browser, or text to paste into its address bar, can hand over your account without your password.
Never type a code or approve a sign-in you didn't ask for. Use one only when you started the sign-in yourself, not because a message asked.
Deny requests you didn't start. If they keep coming, change that account's password, from its own app or website.
If a caller asks for a code, hang up, whoever they say they are.
Still not sure? Check the message. We open its link on a phone and a computer, not yours, and tell you what it is.