What an unexpected login or verification code can mean and what to check.
Short answer
Do not share the code. Check the account directly using the official app or website, review recent activity, and change the password if anything looks unfamiliar.
An unexpected code does not automatically prove that someone accessed your account. It can mean someone entered your details, mistyped their own number, or attempted account recovery.
Never forward or read the code to someone who contacts you.
Open the relevant service directly and review security alerts, active sessions, and recent activity.
If the activity is unfamiliar, change the password and enable multi-factor authentication.
Check it now
A simple checklist for setting up and reviewing multi-factor authentication.
Open the checkSomething already happened?
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
If you see activity you don't recognise, secure the affected account directly, change the password, enable MFA, review recent activity and linked devices, and contact the provider if necessary.
Keep exploring