MyRep by Azora · Learn
OTP / 2FA code-request scam
A scammer makes a real one-time code arrive on your phone, then asks you to read it out — giving them access to your account.
Informational only — not legal or financial advice.
How it works
- They already have your password or are mid-login as you.
- The service sends a one-time code to your phone.
- They call/message pretending to be support and ask you to confirm the code.
Red flags
- Anyone asking you to read or forward a code you received.
- A code arrives that you didn't request.
- “Confirm the code so we can verify it's you” — a real company never needs your code.
What to do
- Treat one-time codes like a key — keep them to yourself.
- If a code arrives unexpectedly, change that account's password.
- Verify any “support” request through the official app.
What NOT to do
- Do not read, type, or forward a one-time code to anyone.
- Do not assume a caller is genuine because they know some of your details.
Have a suspicious message?
Check it before you act. Open MyRep and check a message.