"Please Share the Code You Received" — The OTP Scam Explained

You get a message: "Sorry, I sent my code to your number by mistake — can you forward it?" It's from a friend's account. It's also the most common way messenger accounts get stolen.

#How the scam works

1. The scammer tries to sign in to **your** account, which sends a code to **your** phone or email. 2. They message you — often from a **friend's account they already hacked** — with an excuse to get that code. 3. You forward it. They're in. Next they message your contacts with the same trick, or ask them for money.

#Scripts to recognise

- "I sent a code to you by mistake, please send it back." - "This is support. Your account will be blocked unless you verify the code." - "You won a prize! Confirm with the code we sent." - "Your bank account needs re-verification, share the OTP." - "I'm adding you to a giveaway group — tell me the code."

#Golden rules

1. **Never share** a sign-in code, a two-step code or your wallet PIN — with anyone. 2. **Real companies never ask.** Yapie staff will never ask for your codes or PIN. 3. **Verify by voice.** If a friend asks for a code or money, call them. 4. **Turn on two-step verification** so a stolen code alone can't open your account — see [the 2FA guide](/blog/two-step-verification-guide).

#How Yapie helps

- Codes are only shown or sent for **verifying your own email or phone**, never as a shortcut for strangers. - **New-login alerts** in Saved Messages tell you when a device signs in. - **Settings › Devices** lets you end any unknown session instantly.

#If you already shared a code

1. Sign in on your device immediately and **end other sessions**. 2. **Change your password** and **turn on 2FA**. 3. Tell your contacts not to respond to messages "from you". 4. Contact support from the app.

#Frequently asked questions

Why do scammers ask for my verification code?

Because the code lets them sign in to your account on their device.

Will Yapie support ever ask for my code?

No. Yapie staff never ask for sign-in codes, two-step codes or your wallet PIN.

My friend asked me for a code. What should I do?

Don't send it. Call your friend — their account may have been hacked.