Stand Against Crime

Scam alertGlobal

“Send Me the Code So I Know You’re Real” — the Marketplace Buyer Who Wants Your Number

Posted 13 Oct 2026

The message is disarming because it sounds like the sensible thing a cautious person would do. “There are so many scammers on here — I’ll send a code to your number, just send it back so I know you’re real.” Moments later a six-digit code arrives. It looks like exactly what they described.

It is a verification code triggered against your phone number, usually to register a new account in your name — a Google Voice number is the classic, because it gives the scammer a US number to run further frauds through, tied to you rather than to them. The same request is also used to take over an account you already own, where your number is the recovery method.

Nothing about the exchange feels like a scam while it is happening. There is no money involved, no link to click, no urgency beyond the chat. You read out six digits to a stranger who is about to buy your bookshelf, and the cost arrives weeks later as an account you cannot access or a number used in someone else’s fraud.

The rule is simpler than the trick: a code sent to your phone always authorises something on your account. It can never verify anything about someone else, which means there is no honest version of this request — including when it comes from a friend whose account has already been taken.

What to Do

  • Never read out, forward, or screenshot a verification code, for anyone, for any stated reason. There is no legitimate use of a code you received by someone who did not.
  • If a buyer or seller asks for one, stop the deal and report the profile. The listing is a pretext — they were never buying anything.
  • Verify a stranger the way the platform intends: account age, history, reviews, and meeting in a busy public place. A code proves nothing about them, only about you.
  • Already sent one? Check for new accounts or changed recovery details — review the Google account activity and devices on your email, and sign out of all sessions.
  • Change the password on your email and on anything using that phone number for recovery, and move those accounts off SMS codes onto an authenticator app or passkey.
  • If you find a Google Voice number registered in your name that you did not create, reclaim or unlink it through Google's account recovery, and keep a record in case the number has been used elsewhere.
  • Report it — reportfraud.ftc.gov and ic3.gov in the US, Action Fraud in the UK, 1930 / cybercrime.gov.in in India, Scamwatch in Australia.