031 - Don’t Share Verification Codes
“If someone asks for a login code texted to your phone, they may be trying to steal your account. Banks, schools, and real companies will not ask you to read those codes back to them.”
Be Careful What You Share
You’re trying to log into your favorite app from a new device, or maybe you’re setting up a new gaming account. You type in your username, hit enter, and a text message immediately buzzes onto your phone screen with a random six-digit number. We all know what this is—a verification code. It’s a standard, everyday part of life online.
Because we see them constantly, it’s easy to treat these codes like junk mail. But here is the absolute truth: that code is the final shield protecting your account, and you should never share it with anyone.
The Ultimate Account Hijack
Think of a verification code like a one-time-use digital key. When you enter your password, the app sends this code to your personal phone number just to make 100% sure it’s actually you trying to log in.
Scammers love to bypass this. A common trick is for someone online—sometimes even a hacker who has taken over one of your actual friend's profiles—to message you saying, “Hey, I’m locked out of my account, can I send a recovery code to your phone?” Or, a fake customer support rep might tell you they need the code to verify your identity.
The second you read that code back to them, they don’t just get into an app—they instantly change your password, kick you out, and steal your profile. They can use your hijacked account to scam your friends or look through your private DMs.
Your 5-Second Shield
You don’t need to be a cybersecurity expert to keep your accounts locked down. You just need to follow one golden rule:
Treat Codes Like Passwords: Never, under any circumstances, forward or read a verification code to another person.
Read the Whole Text: When a code arrives, look at the text message closely. It usually says something like, “Do not share this code.” Take that warning seriously.
Go Direct for Support: Real companies, schools, and banks will never ask you to read a verification code back to them over the phone or in a chat. If someone claims to be official and asks for it, block them.
If your account ever gets compromised or you feel overwhelmed by digital drama, don’t carry that stress alone. Reach out to a parent, a school counselor, or get confidential, non-judgmental support through a youth-focused safety community like Technoactivism. Keep your codes to yourself, and keep your digital life secure.
What Now
If you have accidentally shared a verification code and suspect a scammer is trying to hijack your profile, taking immediate, decisive action can stop them in their tracks. Grounded in digital defense guidelines from youth safety advocates and the National Cybersecurity Alliance, follow this recovery checklist:
Force a Full Session Logout: If you still have access to the account, immediately go into your security or privacy settings. Look for an option that says "Sign Out of All Other Devices," "Log Out of Active Sessions," or "Manage Devices," and select it. This instantly terminates the scammer's access, even if they have already typed in your code.
Change Your Passwords Instantly: Create a strong, completely unique password or passphrase for the compromised account. If you happen to reuse that same password for other critical apps—like your Discord, Snapchat, gaming profiles, or your primary email—change those accounts' passwords immediately as well.
Audit and Reset Recovery Methods: Access your account recovery settings to ensure the intruder hasn't locked you out from the back end. Verify that your actual phone number and secondary email address are still listed, and delete any unfamiliar backup email addresses or linked third-party apps that the scammer may have added to maintain permanent access.
Warn Your Friends and Circle: Once scammers take over an account, they move incredibly fast to target the victim's friends list. Send a quick text message or alert through a different platform to warn your friends and group chats that your account was compromised, instructing them not to click any links or give codes to messages coming from your handle.
Report the Intrusion and Ask for Backup: Use the platform’s official "Report a Hacked Account" or recovery wizard to notify the app's support team of the breach. Most importantly, do not hide the mistake out of embarrassment; talk to a parent, teacher, or trusted adult who can help you verify your settings and ensure your digital identity stays safe.
Local Resources
The Children's Center https://www.thechildrenscenter.org/
(360) 699-2244
Teen Talk (Clark County Community Services) https://ccteentalk.clark.wa.gov/
(360) 397-2428
Lutheran Community Services Northwest https://lcsnw.org/office/vancouver/
(360) 694-5624
