Craigslist code scam: why a buyer asks for your verification code
Quick answer
A Craigslist buyer who asks you to read back a code sent to your phone is a scammer. The FTC says it's a way to set up a Google Voice number linked to your number. Craigslist says it only asks for a phone code when you post. Never share a code you didn't request.
- Last updated
How it works
A "buyer" replies to your listing and says they want to verify you're a real person. They tell you a code is coming to your phone and ask you to send it back.
The FTC explains what happens next. The code is a Google Voice verification code. If you pass it along, the scammer creates a Google Voice number linked to your phone number and can use it to rip off other people. The scammer may also want other personal details so they can pretend to be you to access accounts or open new ones.
Craigslist's help page says it only requests a phone code during the posting process, so any other request for your code is a scam.
Red flags
- A buyer asks you to read back or forward a code
- A code arrives that you didn't request
- The buyer says it's to prove you're a real person
- The buyer won't meet or pay normally and keeps chatting
- A request for personal details beyond what a sale needs
Example message
Hi, I'm interested in your item, but I get a lot of fake listings. To prove you're real, I'm sending you a code by text. Please send it back to me.
What to do
- 1
Don't share the code
Don't read it back, type it into a link or forward it. Ignore any code you didn't request.
- 2
Stop replying to the buyer
Block them and report the listing reply to Craigslist.
- 3
If you already sent a code
Google has steps to reclaim your number, and Craigslist asks you to contact it. Change your passwords, and turn on multi-factor authentication.
- 4
Watch for identity misuse
If you shared other personal details, see IdentityTheft.gov and what to do after a data breach.
- 5
Report it
Report it to the FTC and to Craigslist.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Anyone who lists an item on Craigslist posts a way to be reached. Scammers pair that with details from data breaches and people-search sites so the buyer's story sounds real. Serus finds the data brokers and people-search sites that list your name, address and phone number and sends the removal requests, and it alerts you when your details show up in a breach, so fewer scammers can reach you.
More Craigslist scams
Frequently asked
Why do Craigslist buyers ask for a code?
The FTC says it's a scam: they use the code to create a Google Voice number linked to your phone number.
Does Craigslist ever ask me for a code?
Craigslist says it only asks for a phone code when you post. Any other request is a scam.
I gave the code. Can I fix it?
Google has steps to reclaim your number, and Craigslist asks you to contact it. Change your passwords too.
Is Craigslist a scam?
No. Scammers use listings to find targets. Craigslist publishes guidance on scams.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
