The Google Voice verification code scam: how it works and what to do
The Google Voice verification code scam is when a stranger, usually a buyer on a marketplace or someone who "found your lost pet", asks you to read back a six-digit code to prove you are real. The code is Google's. Sharing it lets the scammer set up a Google Voice number linked to your phone and use it to scam other people. Never share a verification code with someone who contacted you.
It looks like a harmless check, and it is one of the most common verification code scams. Here is the script, why the code is valuable, and how to get your number back if you already shared it.
What is the Google Voice verification code scam?
It is a verification code scam that targets people selling items online, posting about lost pets, or advertising services. The scammer contacts you by text or message, says they want to make sure you are a real person before they buy or return your pet, and tells you a code is on its way. You get a text from Google with a code. They ask you to read it back. The FTC describes this pattern in its alert on the scam (FTC, October 2021).
It belongs with vishing and smishing because the goal is the same: get you to hand over something only you hold, through a channel the scammer controls.
How does the scam work, step by step?
- The approach. A reply to your marketplace listing, a lost pet post or a service ad, often with a lot of enthusiasm and no questions about the item.
- The "verification". They say they have been scammed before and need to confirm you are real, so they will send you a code.
- The code arrives. The scammer starts a Google Voice sign-up using your phone number, so Google texts you a genuine six-digit code.
- The ask. They ask you to read or paste the code back to them.
- The takeover. With your code, they complete the set-up of a Google Voice number linked to your phone number.
Why do scammers want your Google Voice code?
Because a Google Voice number linked to your real phone looks legitimate and hides who they are. The FTC explains that scammers use the new number to run other scams, and that with more of your personal information they may go further and open accounts in your name (FTC). The number becomes a disposable identity for the next scam call, text or voicemail.
The general rule covers every service, not just Google: a verification code is for you to type, never to read to someone else (FTC, March 2024).
How do you spot a verification code scam?
| What they say | What is really happening |
|---|---|
| "I need to make sure you're real before I buy" | Real buyers do not need a code from you; they need the item and a safe way to pay |
| "I'm sending you a code, just read it back" | Google sent the code because someone is signing up with your number |
| "I found your dog, I just need to verify it's you" | Proof of ownership is a photo or a description, never a code |
| "Hurry, I have other sellers waiting" | Pressure so you do not stop to read the text, which says not to share the code |
The FTC puts it plainly: do not share a Google Voice verification code, or any verification code, with someone you did not contact first, because that is a scam every time (FTC). The same tactic appears in its advice for people selling online (FTC, July 2022).
What should you do if you already gave someone the code?
- Reclaim your number in Google Voice. Sign in to Google Voice, go to Settings, Linked numbers, and add your number. If another account is using it, Voice asks whether you want to claim it back (Google Voice Help).
- Secure your accounts. If you shared anything else, such as an email address, a password or an account code, change those passwords and turn on two-step verification from a device you trust.
- Report it. In the US, report to the FTC at ReportFraud.ftc.gov. If you lost money, tell your bank straight away and report to the FBI at IC3.
- Watch for identity theft. If they collected personal details too, the FTC's IdentityTheft.gov has a recovery plan.
What if a scammer contacts you from a Google Voice number?
Treat the number as a disguise, not an identity. A Google Voice number can belong to anyone, anywhere, so a local area code proves nothing. Do not call back on a number someone gives you; verify the person or company through a number you look up yourself. If the call or voicemail uses a voice you recognise but asks for money, call that person on the number you already have, and see how to spot a scam voicemail. A saved recording can also be checked for signs of a cloned voice with an AI voice detector.
Frequently asked questions
What is the Google Voice verification code scam?
Why would someone ask for my Google Voice code?
What happens if I give someone my Google Voice code?
Can I get my number back from a Google Voice scammer?
Is it safe to give a verification code to a buyer on Facebook Marketplace or Craigslist?
Save the recording and run it through the free detector for a probability that the voice was machine-generated, then verify through a number you look up yourself.