Someone asked for my verification code: the Google Voice scam

How the trick works

It usually starts after you post something for sale on Craigslist or Facebook Marketplace, or post about a lost pet. Someone replies, says they have heard about fake listings, and wants to make sure you are a real person.

1. They ask for your phone number.
2. A text arrives with a Google Voice verification code.
3. They ask you to read the code back to them.
4. Once they have it, they finish setting up a Google Voice number tied to your phone number.

What someone can do with your code

The FTC says the scammer can use the new Google Voice number to rip off other people while hiding who they are. If anyone traces that number, it leads back to your real phone number.

Some scammers also collect other details about you along the way. With enough of them, the FTC warns, they could pretend to be you to get into your accounts or open new ones in your name.

Why you should never share any code

A verification code is the second lock on an account: your password and the code work together. In the FTC's words, anyone who asks you for your account verification code is a scammer, whether the code came from Google, your bank, your email or a messaging app.

How to get your number back

Google calls this a “claimed” linked number. You can take it back from a Google Voice account of your own, on a computer, as long as you still have the phone.

1. Go to voice.google.com and sign in, or set up Voice on your Google account.
2. Open Settings, and under Linked numbers choose New linked number.
3. Enter your phone number and type in the six-digit code Voice texts you.
4. When Voice says another account is using the number, choose Claim.

This is the one code you type in yourself, on Google's own site, because you started it. That is the difference.

If it already happened

1. Reclaim your number using Google's steps for a claimed linked number.
2. If the code was for anything else, such as your email or bank, change that password now and check the account's recent sign-ins and devices.
3. If you also gave your full name, address or account details, tell your bank and watch for accounts you did not open.
4. Report the profile on the marketplace where you met, and keep the chat and the phone number they used.

• ReportFraud.ftc.govReport the scam to the Federal Trade Commission.
• IC3.govThe FBI’s internet crime complaint center, for losses online.
• IdentityTheft.govIf they got your ID, Social Security number or account details.

Questions