Verification Code

A verification code is a short string of digits or characters, usually valid once and for a few minutes, used to prove that a person controls an account, phone or email address. Services send them by text message or email, or users generate them in an authenticator app such as Google Authenticator. They are a common form of one-time password and a key part of multi-factor authentication, used for logins, withdrawals, payments and password resets. Exchanges and banks often require one before releasing funds. Codes sent by text are the weakest option, because criminals can take over a phone number through SIM swapping. A legitimate company will not ask a customer to read out a code, so a caller who requests one is usually attempting phishing.