Scam asking for your phone number or verification code: how it works
Quick answer
A stranger who wants your phone number or a code sent to your phone is likely after your number. The FTC warns that scammers posing as buyers ask for a Google Voice verification code. Never share any verification code with someone you don't know.
- Comes by
- Text, Social media, Website
- First reported
- Latest official alert
- (FTC)
- Last updated
How it works
The FTC describes this version on online selling sites such as Craigslist and Facebook Marketplace, where scammers pose as buyers.
The scammer says they've heard about fake listings and want to check that you're a real person. They send a text with a Google Voice verification code to your phone and ask you to read it back. If you do, they use it to create a Google Voice number linked to your phone number. They can then use that number to cheat other people, and if anyone traces it, it points back to your real phone number. That's how they hide their identity.
The same sellers' alert lists other tricks from fake buyers: a fake payment notification from a payment app, a claim that they paid twice and need a refund, and a check for more than the price that you're asked to partly send back. The check is fake, but it can show up in your balance. It can take weeks for the bank to find out, and the bank then takes the money back out of your account.
Red flags
- A buyer says they need to "verify" you with a code
- A text with a verification code you didn't request
- A request to send a code back or read it out
- A payment through a mobile app from someone you don't know
- A check for more than the selling price, with a request to send back the difference
- A claim they paid you twice and want a refund
Example message
Hi, is this still available? I get a lot of fake listings, so I'm sending a verification code to your phone to confirm you're real. Please send me the code you get.
What to do
- 1
Don't share the code
The FTC says not to share a Google Voice verification code, or any verification code, with someone you don't know.
- 2
Stop replying
End the conversation with the buyer. Don't accept a mobile payment from someone you don't know, and never deposit a check for more than the selling price.
- 3
If you already gave a code
Treat your phone number as compromised. Change the passwords on accounts that use it and turn on multi-factor authentication where you can. Our guide on what to do after a data breach has the steps.
- 4
Sell safely
The FTC notes that many sites recommend selling to a local buyer you meet in person and accepting only cash. If you're not selling locally, look at the seller protections the site offers.
- 5
Report it
Report the buyer to the FTC at ReportFraud.ftc.gov.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
If a scammer already has your phone number and the listing links to your name, you're easier to target. Phone numbers, names and addresses are listed on people-search sites and show up in data breaches. Serus finds the data brokers that list your number and removes it, and alerts you when your data appears in a breach, so fewer scammers can reach you.
Official alerts
Frequently asked
Why would a scammer want a verification code?
The FTC says they use it to create a Google Voice number linked to your phone number, then use that number to cheat other people. If it's traced, it leads to you.
Is it ever safe to share a verification code?
The FTC says not to share a verification code with someone you don't know. A real buyer doesn't need one.
Does the code scam only target sellers?
The FTC alert is about people selling things online. Other scams may also ask for a code, but this one is based on a buyer pretending to verify you.
Where can I report it?
At ReportFraud.ftc.gov, the FTC's reporting site.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
