SellUsediPhoneFast · Safe · Simple
In the verification code scam, a fake buyer asks a seller to read back a 6-digit code "to prove you are real", but the code is actually a login or setup code that lets the scammer take over the seller's phone number, Google Voice number or online account. The FTC has warned that no legitimate buyer needs a verification code sent to the seller's phone. A shared code can let a scammer create a Google Voice number linked to the seller's phone number, sign in to email or messaging accounts, or reset passwords. Recovery starts with changing passwords and securing the number with the carrier. How to Sell an iPhone Online Safely and Avoid Scams covers other risks.
- The ask: "I'll send you a code to make sure you're not a scammer; tell me what it says."
- The truth: the code belongs to an account setup or login using your number.
- The rule: never share a code sent to your phone with anyone.
- If shared: change passwords, sign out other sessions and contact your carrier.
How does the verification code scam work?
The verification code scam works in 5 steps:
- A seller lists an iPhone on a marketplace with a phone number in the listing or messages.
- A "buyer" says they have been scammed before and want to verify the seller is real.
- The scammer starts a setup or sign-in on a service, such as Google Voice, using the seller's number.
- The service texts a verification code to the seller's phone.
- The buyer asks the seller to read the code back, then uses it to finish the setup or sign-in.
The scammer then disappears, or keeps chatting to collect more codes. The sale never happens.
What happens if I share a code?
Sharing a code can lead to 4 outcomes, depending on which service sent it. The table lists common cases.
| Code from | What the scammer gains |
|---|---|
| Google Voice | A Google Voice number linked to your phone number, used to scam others in your name |
| Email or social media account | Access to the account, its messages and password resets |
| Messaging app, such as WhatsApp | The account moved to the scammer's device |
| Bank or payment app | A path to approve logins or payments |
The message with the code usually names the service and warns not to share it. Read the full text before replying to anyone.
How do I recover my number?
Recover a phone number linked to a scammer's Google Voice account in 4 steps:
- Sign in to Google Voice with your own Google account, or create one.
- Choose to add your phone number as a linked number.
- When Google Voice says the number is in use, follow the prompt to reclaim it.
- Verify with a new code sent to your phone, and the number is removed from the scammer's account.
Google's support pages describe the reclaim process. For other accounts, use each service's account recovery and sign out all other sessions.
How do I secure my accounts after sharing a code?
Secure accounts after sharing a code with 6 steps:
- Change the password of the account the code belonged to.
- Sign out of all other sessions in that account's security settings.
- Turn on two-factor authentication with an authenticator app or passkey, where available.
- Check email forwarding rules and recovery addresses for changes.
- Contact the bank if the code came from a bank or payment app.
- Report the scam to the FTC at ReportFraud.ftc.gov and to the marketplace.
How do I protect my phone number from takeover?
Protect a phone number from takeover with 3 carrier tools, offered by the major U.S. carriers under different names:
| Tool | What it does |
|---|---|
| Account PIN or passcode | Requires a PIN for account changes and number transfers |
| Port-out protection or number lock | Blocks the number from being moved to another carrier without approval |
| SIM change protection | Requires extra verification for SIM or eSIM changes |
Turn these on in the carrier's app or website. They protect against SIM swaps, where a scammer moves the number to their own device.
Why do scammers target phone sellers?
Scammers target phone sellers because marketplace listings often include a phone number, sellers are eager to complete a sale and the "verify you're real" story sounds reasonable. A linked Google Voice number gives the scammer a U.S. number to use in other scams, which makes it hard to trace. Listings for high-value items, such as recent iPhones, attract more attempts.
How do I sell a phone without sharing my number?
Sell a phone without sharing a personal number in 3 ways: keep all messages inside the marketplace's own chat, use the marketplace's payment and shipping tools, or sell to a buyback that communicates by email and pays after testing. A buyback never asks for a code sent to the seller's phone.
What other codes should I never share?
Never share 5 types of codes with a buyer or anyone who contacts you:
- Apple Account verification codes.
- Bank and payment app login codes.
- Carrier account or port-out PINs.
- Messaging app registration codes.
- Email and social media login codes.
Apple states that it never asks for a verification code by phone or message. A request for an Apple Account code from anyone is a scam.
How do I spot the scam early?
Spot the scam early by 4 signs: the buyer asks for a phone number before asking about the phone, the buyer mentions past scams to justify verification, the buyer says a code is coming before you agree to anything, and the buyer becomes pushy when you hesitate. Stop the conversation at the first request for a code.
Does the scam affect my iPhone itself?
The verification code scam does not affect the iPhone hardware, but a shared Apple Account code can let a scammer sign in to the account and use Find My to lock or erase the phone. Change the Apple Account password right away, check the device list at account.apple.com and remove unknown devices. Turn on Stolen Device Protection in Settings for extra security.
What does the FTC say?
The FTC advises that anyone who asks for a verification code sent to your phone is a scammer, and that no legitimate buyer, seller or business needs that code. The FTC collects reports at ReportFraud.ftc.gov, which helps law enforcement track scam patterns.
How does this scam compare with payment scams?
The verification code scam targets the seller's accounts, while payment scams target the phone itself. The table compares the common scams sellers face.
| Scam | What the scammer wants | Main defense |
|---|---|---|
| Verification code | Your number or account | Never share codes |
| Fake Zelle notice | The phone, or a fee | Check the bank app directly |
| Fake PayPal email | The phone, or a refund | Log in to PayPal directly |
| Overpayment | A refund of money never sent | Check the real balance |
Zelle Scams When Selling an iPhone: How to Avoid Them and Fake PayPal Payment Emails: A Seller's Checklist cover the payment scams.
Which marketplaces see this scam?
The scam appears on any marketplace where sellers share phone numbers, including Facebook Marketplace, Craigslist, OfferUp and local classified sites. Marketplaces with built-in chat and payment reduce exposure, because sellers do not need to share personal numbers. Selling an iPhone on Facebook Marketplace: Risks and Steps covers marketplace safety.
What is the safest way to sell an iPhone without these risks?
The safest way to sell an iPhone without these risks is a mail-in buyback that quotes online, sends a free prepaid label and pays by PayPal, Zelle or bank transfer 1–2 business days after testing. No stranger contacts the seller, no codes are requested and no payment notice needs to be trusted. Sell iPhone for Cash starts a quote, and Best Place to Sell iPhone for Cash: 6 Options Compared compares every route.
How do I tell a real code message from a scam?
A real code message arrives only after you start a sign-in or setup yourself. A code that arrives when you did nothing means someone else is trying to use your number or account. Do not share it, and change the password of the named service if the code came from an account you own.
Should I change my number after the scam?
Changing the number is rarely needed after reclaiming it from Google Voice and securing the carrier account. Change it only if scam calls and texts continue at a high level.
What should I say to a buyer who asks for a code?
Reply with a short refusal and end the conversation, for example: "I don't share verification codes. If you want the phone, we can meet at a police station exchange zone and you can inspect it there." A real buyer accepts a safe meeting. A scammer usually stops replying or pushes harder for the code, which confirms the scam.
Can the scammer use my number to scam others?
A scammer who links a Google Voice number to your number can use that Google Voice number to contact other people, which hides the scammer's identity. Reclaiming the number breaks the link. Report the incident to the marketplace and the FTC so the pattern can be tracked, and warn contacts if suspicious messages appear in your name.
Do iPhones offer protection against code scams?
iPhones offer 3 protections that help against code scams: verification codes can autofill only in the app or website that requested them, Stolen Device Protection adds delays and biometric checks for sensitive changes, and Messages can filter texts from unknown senders. None of these stop a code from being read aloud to a scammer, so the main defense is never sharing it.
Can a buyback ask for a code?
A legitimate buyback never asks for a code sent to the seller's phone. It uses the quote reference and email address to identify a sale, and payment details given in the quote to pay the seller.
Is posting a phone number in a listing risky?
Posting a phone number in a public listing invites code scams and spam texts. Use the marketplace's chat instead, and share a number only with a buyer you have arranged to meet.
Frequently asked questions about the verification code scam
Why would a buyer ask me for a verification code?
A buyer asks for a verification code because it is a scam: the code was sent by a service, such as Google Voice or an email provider, where the scammer started a setup or sign-in with your number. Reading the code back completes it. No legitimate buyer needs a code sent to your phone.
What happens if I gave someone my Google Voice verification code?
Sharing a Google Voice code lets the scammer link a Google Voice number to your phone number and use it to scam others. Reclaim your number by adding it to your own Google Voice account and following the prompt to reclaim it, then change passwords on any accounts that use the number.
Can someone hack my phone with a verification code?
A verification code does not hack the phone itself, but it can give access to the account it belongs to, such as email, messaging, a bank or an Apple Account. With an Apple Account, a scammer could use Find My on your devices. Change the password, sign out other sessions and turn on stronger two-factor protection.
How do I protect my number when selling online?
Keep messages inside the marketplace's chat, avoid posting your number, add an account PIN and port-out protection with your carrier and never share codes sent to your phone. Selling to a buyback that communicates by email and pays after testing removes the need to share a number with strangers. When in doubt, stop the conversation and check the account directly in its own app.
Where do I report a verification code scam?
Report the scam to the FTC at ReportFraud.ftc.gov, report the buyer's profile to the marketplace where you met and contact the service that sent the code, such as Google or your bank. If a phone number was moved without permission, contact your carrier right away to restore it. Report suspected scams to the FTC at ReportFraud.ftc.gov and to the marketplace involved.
Sources and references
- Federal Trade Commission (FTC): consumer alert on verification code scams and ReportFraud.ftc.gov.
- Google: Google Voice help on reclaiming a linked phone number.
- Apple Support: recognize and avoid phishing and social engineering scams.