What it looks like
"Hi, before I buy your bike I need to make sure you are a real person. I just sent a code to your phone, can you text it back to me?"
An example. Real ones change their wording, amounts and names all the time.
How it works
Many accounts send a short code by text when someone tries to sign in, reset a password or set up a new device. The code proves the person typing it is really you. When a scammer tries to break into your account, the code goes to your phone, not theirs. So they need you to read it to them.
They come up with a reason. A marketplace buyer wants to make sure you are real. A 'bank fraud agent' needs to verify you. A friend's hacked account says a code was sent to you by mistake. The FTC has warned about one version where the code lets a scammer set up a Google Voice number linked to your phone, which they then use to scam others.
It fools smart people because the request seems small and the code looks like a meaningless string of numbers. But sharing it is like handing over a key for a minute, and a minute is enough to change your password and lock you out. The rule is short: a code is only for you to type in, never to read out to someone else.
Signs it is fake
- Anyone asks for a code that was just texted or emailed to you
- The text with the code says not to share it, but the person says it is fine
- A buyer on a marketplace asks for a code to 'prove you are real'
- A caller from 'your bank', 'Amazon' or 'Apple' needs the code to 'verify' you or stop fraud
- A friend's account messages you asking you to forward a code that was 'sent to you by mistake'
What to do
- Never share a code with anyone who contacts you. Real companies will not ask for it.
- A code is only for you to type into a website or app you opened yourself.
- If someone keeps asking, end the conversation and block them.
If you already clicked, called or paid
- Sign in to the account the code was for and change your password. Turn on two-step sign in if it was off.
- Look for changes you did not make, like a new email address or phone number on the account.
- If it was a bank code, call your bank right away using the number on your card. If it was a Google Voice code, follow Google's steps to reclaim your number. Report it at reportfraud.ftc.gov.
Being fooled is not your fault. These messages are made by professionals to look real. Acting quickly is what matters. See what to do if you paid a scammer.
Not sure about a message?
Forward it to Uncle at +1 208 214 0093, or send a screenshot. He tells you plainly what looks wrong. He never asks for passwords or codes, and he never texts first. How it works.
Worried about a parent? With the Family plan, you get a heads up when a likely scam reaches them.
More common scams
- Unpaid toll text
- Package delivery text
- Bank fraud alert text
- Amazon order or account text
- See all common scams
Written by the Textuncle team. Last updated October 3, 2026.
Text Uncle