“Send me that code” account takeover

A friend asks you to forward a six-digit code “sent by mistake.” Their account has already been hijacked, and the code unlocks yours next.

What it looks like

How it usually ends

Ana's account had been taken over. The code was yours — now yours is taken too, and it's messaging your contacts.

Red flags

• Request for a one-time code
• Pattern matches account-takeover chains
• Sent minutes after Ana's login from a new device

What to do

• Never share a one-time code with anyone.
• Call the friend to check before replying.
• Turn on two-step verification with a PIN or passkey.

Could you spot it in the moment?

In Painted Sky you’re born at random somewhere on Earth and live a whole life — and this scam is one of the fakes that can find you. Make the call yourself, then replay the same life with a lens that shows what was fake.

Related scams