Never Share a Verification Code With Anyone — Even if They Claim to Be Support

No legitimate company will ever call or message you and ask for a verification code that was just sent to your phone. That code was sent to verify you, not to verify them. If someone asks for it, they are trying to use it to log into your account right now, in real time.

This scam works because it creates urgency and authority. "We detected suspicious activity, please read me the code we just sent." It sounds helpful, but it is the attack itself. The code is the key — once you hand it over, they are in. If you receive an unexpected code, treat it as an alarm, not a request.