Sellers
The verification code scam: why a buyer wants you to read them a code
Fake buyers ask sellers to “prove they’re real” by sharing a code. Here’s what that code really does, and what to do if you already shared one.
ContactCheckup editorial · Updated · 4 minute read
How it works
You post something for sale on a site like Craigslist or Facebook Marketplace. A “buyer” says they’ve run into fake listings and wants to make sure you’re a real person. They ask for your phone number, then tell you they’re sending a code and ask you to read it back.
The FTC explains that the code is usually a Google Voice verification code. If you share it, the scammer uses it to set up a Google Voice number linked to your phone number.
Why it matters
A number linked to your real phone lets the scammer contact other people while hiding behind your identity. The same trick can be used with codes from other services to try to get into your email or other accounts.
The rule that stops it
The FTC’s advice is simple: don’t share a Google Voice verification code, or any verification code, with someone you didn’t contact first. That’s a scam, every time. A real buyer has no reason to need a code from your phone.
If you already shared a code
Google provides steps to reclaim a phone number that was linked to a Google Voice account without your permission; the FTC’s alert links to them. If you shared codes from other services, change those passwords and turn on two-step verification. Report the buyer to the marketplace and the scam at ReportFraud.ftc.gov.
Other versions of the same trick
“I sent you a code to confirm you’re not a bot.” “Read me the code so I can add you as a payee.” “The delivery app needs your code to schedule pickup.” The story changes; the request doesn’t. Any code sent to your phone is for you alone.