Security
Why You Get OTP Messages You Did Not Request and What to Do
A text arrives with a six-digit code for a service you did not open. It is natural to worry. The cause is usually harmless, but a few cases are worth acting on, and the first rule is the same in every case: do not share the code with anyone.
Common causes
| Cause | What it means | Risk |
|---|---|---|
| Someone typed your number by mistake | A stranger entered a wrong digit when signing up | Low |
| A login attempt on your account | Someone has your password or is guessing it | High, act now |
| SMS bombing | A tool floods a number with codes from many services | Annoying, usually not a breach |
| A shared or recycled number | A previous owner's accounts still point to it | Medium |
| A phishing attempt | A scam wants you to read the code back | High if you share it |
Do not do this
- Do not read the code to a caller, even if they say they are from the service.
- Do not forward the code in a chat.
- Do not click links in the same message or in follow-up texts.
What to do, step by step
- Ignore the code and do not enter it anywhere.
- Open the service's app directly, not through a link, and check recent activity or login history.
- If you see a login you do not recognise, change the password and sign out of all devices.
- Turn on an authenticator app for that account.
- If the same service keeps sending codes, report the number to its support team.
When many codes arrive at once
A burst of codes from many different services in a short time often means SMS bombing. It is mostly an annoyance and stops after a while. Do not respond. If it continues for days, tell your operator and consider changing the number for accounts that matter.
Check your own accounts
- Make sure password reset emails go to an address that only you can read.
- Look for unfamiliar devices in your account security page.
- Use a unique password for every important account.
Reasons ranked from harmless to serious
| Reason | How common | What to do |
|---|---|---|
| A typo by someone else | Common | Ignore the code and do not share it |
| Your own app retrying | Common | Wait for the resend timer |
| A bot testing your number | Common | Ignore, and watch for a pattern |
| Someone trying to enter your account | Less common | Change the password and turn on an authenticator |
What to do if they keep coming
- Do not click links or reply with the code.
- Open the app yourself and check recent sign-ins.
- Change the password if you see anything unfamiliar.
- Block the number only if it is an ordinary sender, since codes usually come from varying senders.
- Contact the service if there are many in one day.
Questions people ask
Did someone hack me if I get a code?
Not necessarily. A code only means that someone asked the service to send one to your number.
Should I reply STOP?
Only for marketing messages from senders you recognise. Do not reply to unknown senders.
Related guides and pages
Create a free OtpGet account and try it with a small balance.