Google Voice Code Scam: How It Works and What to Do

By 2Phon Team · · 8 min read

A buyer or a match asks you to read back a code that just arrived on your phone. That's the Google Voice verification code scam. Here's how it works, the red flags, and what to do if you already shared a code.

Illustration of a phone hanging from puppet strings, its screen shaped like a wide-open mouth

Key takeaways

  • If someone you met online asks you to read back a code that just arrived on your phone, it's a scam. The FTC says it's "a scam, every time."
  • In the classic version, the code lets a "buyer" link your number to their Google Voice account.
  • The same trick is used to take over WhatsApp and other accounts.
  • Already shared a code? Reclaim your number in Google Voice, re-secure the account, and report it.
  • A second number for listings and dating keeps your personal number away from strangers. The code rule doesn't change: never share one.

If someone you met online asks you to read back a verification code that was just sent to your phone, stop: it's a scam. In the Google Voice verification code scam, a "buyer" or a "match" uses your phone number to set up a Google Voice account, and the six-digit code you read out is the last step they need. The FTC's advice is blunt: "That's a scam, every time" (FTC, October 2021).

This guide explains how the scam works step by step, the lines scammers use, and what to do if you already shared a code. It also covers the simplest way to cut your exposure: keep your personal number off listings and dating profiles, and give strangers a second number instead. An iPhone app like 2Phon gives you a real second number for that.

How the Google Voice code scam works, step by step

The scammer starts a Google Voice sign-up with your number, and you hand them the code that finishes it. Google Voice lets an account owner link a phone number to their Voice account, and Google checks that number with a six-digit code (Google Voice Help, as of October 2026). The scammer controls the account; you control the phone. The code is the bridge.

  1. You post your number somewhere public

    A marketplace listing, a lost-pet post, a dating profile or a classifieds ad. The FTC says these scammers "target people who post things for sale on sites like Craigslist or Facebook Marketplace."

  2. Someone gets in touch with a reason to "verify" you

    They seem interested, but say they need to make sure you're a real person — or, for a lost pet, the real owner — before going any further. The FTC describes exactly this show of hesitation.

  3. They start linking your number to their Google Voice account

    On their side, they type your phone number into Google Voice. Google sends a six-digit code to your phone — by text for a mobile number, or by an automated call for a landline.

  4. They ask you to read the code back

    "I've sent you a code, just tell me what it says." The message on your phone comes from Google, which makes it look official and harmless.

  5. Your number is now linked to their account

    With your code, they finish the setup. They now have a Google Voice number connected to your phone number, and they can use it to contact other people while the account points back to you.

Why do scammers want a Google Voice number linked to yours?

Because it gives them a working US number that isn't connected to their own identity. Google Voice for personal accounts is a US service, and a new account needs an existing phone number to link to. By borrowing yours, the scammer gets a number they can use for the next scam — and if anyone looks into it, the trail leads to your number, not theirs.

Notice what the scammer does not get: your phone, your texts or your calls. The code proves control of your number to one service, once. That's why the fix below is about taking the link back, not replacing your phone.

The same "read me your code" trick, other accounts

Any service that verifies you with a one-time code can be targeted the same way. Google Voice is the best-known version, but the pattern — "a code is coming, please read it to me" — works against any account that trusts your phone number.

  • WhatsApp takeovers. Someone starts registering WhatsApp with your number on their phone, and WhatsApp sends the code to you. Often the request comes from a friend's account that has already been taken over: "Sorry, I sent my code to you by mistake, can you send it back?" The code is for your account.
  • Bank and app logins. Scammers pretend to be your bank or a support team, say there's a problem with your account, and ask for the code "to confirm it's you." The FTC's rule covers this too: "Anyone who asks you for your account verification code is a scammer" (FTC, March 2024).
  • Codes read out by phone call. Some services deliver the code with an automated call instead of a text. The scam doesn't change: whoever asks you to repeat what the call said wants into an account. More on how call codes work in verification codes by phone call.

Red flags: what the scammer says vs what's happening

The story changes; the request doesn't. Here are typical lines, and what each one really means.

What they sayWhat's really happening
"I need to make sure you're a real seller."They're starting a Google Voice setup with your number.
"I'll send you a code so we both know this is legit."The code comes from Google or another service, not from them.
"Can you just read me the six digits?"That code is the last step to link or take over an account.
"I sent my code to your number by mistake."It's the code for your own account, often WhatsApp.
"This is your bank — we need the code to stop a fraudulent charge."Real banks don't ask for codes. Hang up and call the number on your card.
"Let's move off the app and talk by phone."They want your number, and a channel the platform can't see.

Other warning signs: they're in a hurry, they're interested before asking a single question about the item, or they push hard for your number on day one of a dating chat. For marketplace-specific scams, such as fake payments and overpayment checks, see which phone number to use when selling online.

What to do if you already shared a code

Act quickly: take your number back, secure the account the code was for, and report it. Sharing a code is a common mistake, and most of the damage can be undone.

  1. Stop responding

    Don't share anything else, and don't read out any new codes that arrive. Block the person and report their profile or listing to the marketplace or dating app.

  2. Reclaim your number in Google Voice

    Google's help page "Reclaim your Voice number" gives these steps: on a computer, go to voice.google.com and open Settings. Under Linked numbers, click New linked number, enter your phone number and verify it with the six-digit code. If the number is being used by another account, Google asks whether you want to claim it — click Claim (Google Voice Help, checked 2026-10-27). You need to be signed in to Google Voice with your own Google Account to do this.

  3. If it was a WhatsApp code, register your number again

    Open WhatsApp and register your phone number again with the code it sends to you. WhatsApp's help page on recovering a compromised account walks through it, including what to do if it asks for a PIN you didn't set. Then turn on two-step verification in WhatsApp's settings.

  4. If it was a login code, secure that account

    Change the password, sign out of other devices or sessions, and turn on two-step verification — an authenticator app is stronger than codes by text. If the code was for a bank, call the bank on the number on your card or in its app.

  5. Report it

    In the US, report the scam at ReportFraud.ftc.gov, as the FTC recommends. Elsewhere, use your country's consumer-protection or fraud-reporting service.

If calls or texts stop reaching your phone altogether after an incident like this, contact your carrier straight away. That's a different problem from a shared code, and your carrier is the one that can fix it.

How a second number limits your exposure

Fewer strangers with your personal number means fewer chances for this scam to start. The Google Voice code scam needs two things: your number and your cooperation. You control the second one with the rule above. A second number takes care of much of the first.

Use a second number anywhere strangers will see it:

Your personal number then stays with the people and services that already have it — your bank, your carrier, your family. For why that matters beyond this one scam, see what someone can do with your phone number.

Where 2Phon fits

2Phon is an iPhone app that gives you a real second phone number from dozens of countries, next to your personal number on the same phone. It does two jobs: receiving verification codes for your own sign-ups, with a push notification when a code arrives, and making and receiving real calls. When you call a buyer or a match from 2Phon, they see your 2Phon number, not your personal one.

What it doesn't do: it doesn't send text messages, and it's iPhone only. Written conversations stay in the marketplace's or dating app's own chat; calls go through your second number. The number is yours while your subscription is active.

Get 2Phon on the App Store — a real second number for listings, matches and calls, so your personal number stays private.

Never read out a code

The Google Voice verification code scam works because the code looks harmless and the story sounds reasonable. It isn't, and no story changes that. Keep codes to yourself, keep your personal number off public listings, and if a code has already slipped out, reclaim your number and report it. And if you want to understand what a separate number can and can't do, start with what a second phone number is.

Frequently asked questions

What happens if I give someone my Google Voice verification code?

The code lets them finish linking your phone number to their own Google Voice account. They get a Google Voice number connected to your number, not theirs, and can use it in other scams. Reclaim your number in Google Voice as soon as you can and report it at ReportFraud.ftc.gov.

Why would a buyer want to send me a verification code?

There is no honest reason. A real buyer doesn't need to "verify" you with a code. The FTC says that when someone who contacted you asks for a verification code, "that's a scam, every time."

Can someone hack my phone with a verification code?

Not your phone itself. The code proves control of your number to one service, so the risk is an account — a Google Voice number, a WhatsApp account or a login — being set up or taken over with your number. Never share a code, and act fast if you did.

A friend asked me to forward a code they "sent by mistake". Is that a scam?

Treat it as one. The friend's account may already be in someone else's hands, and the code is for your account. Don't send it; call your friend on the number you already have for them and check.

Does a second phone number protect me from this scam?

It limits who sees your personal number, so fewer strangers can start a code request against it. It doesn't make sharing a code safe — never read out a code, whichever number it arrives on.

Keep reading