---
title: "Code and sign-in request scams: how to spot one | URLert"
description: "A message or a call that asks you for a code, or to approve a sign-in you didn't start. A code can let someone into your account, even on the real website."
url: https://www.urlert.com/scams/codes-and-sign-in-requests
mcp: https://www.urlert.com/mcp
---

[URLert home](https://www.urlert.com/index.md)

[About (opens in a new tab)](https://www.urlert.com/about.md) [Sign in](https://www.urlert.com/login.md)

[All scam guides](https://www.urlert.com/scams.md)

# Codes and sign‑in requests

A message or a call that asks you for a code, or to approve a sign-in you didn't start. A code can let someone into your account, even on the real website.

A text from +1 555 0112

+1 555 0112

Text Message

Hi, I sent my verification code to your number by mistake. Can you send it back to me?

On this page

1. What it looks like
2. How to spot one
3. What to do
4. Already acted?
5. Similar scams

## What it looks like

A text from +1 555 0112

+1 555 0112

Text Message

Hi, I sent my verification code to your number by mistake. Can you send it back to me?

A call

The caller says

“This is your bank's fraud team. To stop the payment, read me the code we just sent you.”

A sign-in request on your phone you didn't start (“Are you trying to sign in?”), and then an email

Are you trying to sign in?

Deny Approve

… and then

From to me

IT support: please approve the request so we can fix your mailbox.

Examples. The names and amounts change; the shape doesn't.

## How to spot one

1. **Someone asks for a code that was sent to you.** A code is a key: with it, they get in or approve a payment.
2. **A sign-in request you didn't start,** maybe many in a row, until you tap Approve to make them stop.
3. **“Read me the code to cancel it.”** A code can't cancel a payment or prove who you are to a caller.
4. **The code's own text says not to share it.** Read the text the code came in.
5. **A file or some text “so we can check your account”.** A file saved from your browser, or text to paste into its address bar, can hand over your account without your password.

## What to do

1. **Never type a code or approve a sign-in you didn't ask for.** Use one only when you started the sign-in yourself, not because a message asked.
2. **Deny requests you didn't start.** If they keep coming, change that account's password, from its own app or website.
3. **If a caller asks for a code, hang up,** whoever they say they are.
4. **Still not sure?** [Check the message](https://www.urlert.com/index.md). We open its link on a phone and a computer, not yours, and tell you what it is.

### Already gave a code or approved it?

- [I gave a password or a code](https://www.urlert.com/recover/password.md)
- [I replied or called](https://www.urlert.com/recover/replied.md)

## Similar scams

- [Fake sign-in pages](https://www.urlert.com/scams/fake-sign-in-pages.md)
- [Bank and card alerts](https://www.urlert.com/scams/bank-and-card-alerts.md)
- [Marketplace buying and selling](https://www.urlert.com/scams/marketplace.md)

On this page

1. What it looks like
2. How to spot one
3. What to do
4. Already acted?
5. Similar scams

[URLert home](https://www.urlert.com/index.md)

[About(opens in a new tab)](https://www.urlert.com/about.md) · [How we decide](https://www.urlert.com/how.md) · [Privacy](https://www.urlert.com/privacy.md) · [Terms](https://www.urlert.com/terms.md) · [For developers](https://www.urlert.com/developers.md) · [AI assistants](https://www.urlert.com/assistants.md)