By Alex Carter, Editor at GetVerifyCode
Why did you get a Google verification code you didn't request? Most often, someone typed your phone number by mistake while signing in or signing up, or someone tried to sign in to an account linked to your number. The code alone is not a breach. Never share it, and if Google also sends a sign-in alert, secure your account.
Key facts
- A Google verification code is a one-time code sent by text to confirm a sign-in, a sign-up or a recovery request for a phone number.
- The FTC says never to give a verification code to anyone, and anyone who asks you for one is a scammer.
- A code you didn't request means someone entered your number somewhere. It does not by itself mean they know your password.
- Google recommends Google prompts or a passkey over text codes as a second step, partly because prompts help protect against SIM swaps.
Quick Answer
- Do not share the code, reply to the text, or tap links in follow-up messages.
- If it was a one-off and you got no other alerts, you can ignore it. The code expires on its own.
- If you also see a "new sign-in" or password-change alert, check your Google Account security and change your password now.
Why did I get a Google code I didn't request?
The text comes from Google, but the request came from someone typing your number into a Google form. These are the usual reasons.
Someone mistyped their own number
Phone numbers are easy to get wrong by one digit. A person creating a Gmail account or adding a recovery phone may have entered your number instead of theirs. This is the most common and harmless cause, and it usually happens once.
Someone entered your number to sign in
If your number is the recovery phone or 2-Step Verification phone on a Google Account, a sign-in attempt on that account can trigger a code. That account may be yours, or an old account you forgot about.
A scammer wants you to read the code back
Some scams start with a code you didn't ask for, followed by a call or message: "I sent you a code by mistake, can you send it to me?" or "This is Google support, read me the code." Google codes are only for the person signing in. Read more in the FTC's alert, What's a verification code and why would someone ask me for it?
Your number was recycled
Carriers reassign old numbers. If your number used to belong to someone else, their old accounts may still list it, so you can receive codes meant for them.
How to check and secure your Google Account
- Do not reply to the text and do not share the code with anyone, including people who claim to be from Google.
- Open your Google Account directly in your browser or the Google app, not from a link in a message.
- Go to the Security section and review recent security activity and the devices signed in to your account. Sign out any device you don't recognise.
- If anything looks wrong, change your password and use a password you don't use anywhere else.
- Turn on 2-Step Verification if it is off, and add Google prompts or a passkey. Google explains the steps in Turn on 2-Step Verification.
- Check your recovery phone and recovery email, and remove any you don't recognise.
- If you lost access or your phone was stolen, follow Google's Fix common issues with 2-Step Verification.
If you keep getting codes many times a day, treat it as someone actively trying your number. Secure the account first, then ask your mobile carrier whether they offer a SIM or port-out lock.
Is a code you didn't request a scam?
The code itself is usually real, because it really comes from Google. The scam, when there is one, is what comes next. Watch for these signs:
- A call or chat asking you to read the code back or forward the text.
- A message that says your account will be closed unless you "confirm" the code.
- A link in a text that asks you to sign in to Google.
If you get any of these, stop, block the sender, and check your account the safe way described above. For the basics of how these codes work, see what a verification code is.
When a separate number can help
If your personal number appears on many old sign-ups, it gets more stray codes. Some people keep their main number for banking and Google, and use a second number for one-off sign-ups on sites they don't fully trust. Read how to get a second phone number for online sign-ups or how to get a temporary phone number for verification. Keep your Google Account recovery phone on a number you own long term.
Using a temporary number to protect your privacy, travel, or test your own app is generally lawful in many places, but laws differ by country and each app sets its own terms. Check both. Never use it for fraud, impersonation, or getting around a ban. See are temporary phone numbers legal? and our acceptable use policy.
Related problems
- Didn't get the verification code? 12 fixes
- Verification code invalid or expired?
- This phone number can't be used for verification
- Phone number already used on another account
- How to check an OTP sent to a virtual number
- Google SMS verification with a temporary number
Need a number for a one-off sign-up instead of your own? Create your account and see the Google verification page. Top up your wallet from $1. Each number is priced live per service and country, and you see the quote before you confirm. If no SMS arrives in about 20 minutes, the unused credit returns to your wallet. Some apps reject virtual numbers. Acceptance is decided by the app, not by us.
About the author: Alex Carter is the editor at GetVerifyCode. Alex tests SMS verification routes across services and countries and writes plain-language guides on receiving OTP codes safely.
GetVerifyCode is not affiliated with the apps named in this article. Follow each app's terms and local law.
Live prices and routes: Google SMS verification
FAQ
FAQ
Repeated codes usually mean someone keeps entering your number, either by mistake or while trying to sign in to an account linked to it. Check your Google Account security, change your password if anything looks wrong, and turn on 2-Step Verification with Google prompts.
They would need the code, and usually your password too. That is why scammers try to trick you into reading the code back. If you never share it, a stray code on its own does not give anyone access.
If it happened once and you see no sign-in or password-change alerts, it is usually safe to ignore. The code expires on its own. If more alerts follow, secure your account straight away.
Don't send it. Asking for a code "sent by mistake" is a common scam pattern used to take over accounts. Block the sender and report the message.
Treat any call or message asking for your code as a scam. Verification codes are only for you to sign in, and the FTC says anyone who asks for one is a scammer.
Verification texts can come from different short codes or numbers depending on your country and carrier. Don't reply to the sender. If you're unsure whether a message is genuine, open your Google Account directly instead of tapping anything in the text.
