eSafe Academy

Tech Support and Accounts

Two-Factor Authentication Scam

Two-Factor Authentication Scam explained in plain English: what to watch for, what to do, and how to practice safely.

Example message

Support: Read me the six-digit code so I can stop the login attempt.

What it is

Two-Factor Authentication Scam is a tech support and accounts scheme where an ordinary message, call, email, or chat is shaped into an urgent request. It is designed to make you act before checking the source.

How it works

The scam usually starts with a believable prompt such as: “Support: Read me the six-digit code so I can stop the login attempt.” From there, the person is pushed toward a link, payment, code, document, or conversation before they can verify the request independently.

Red flags

  • Unexpected security warning
  • Remote access request
  • Support number inside alert
  • Request for password or one-time code

What to do

  • Do not use the link, phone number, or payment instruction from the message.
  • Never share one-time codes and deny prompts you did not start.
  • If you entered information or sent money, contact your bank or account provider immediately and save screenshots.

If it already happened

  • Stop communicating with the sender.
  • Do not send more money or codes.
  • Contact the real company, bank, platform, or agency through an official channel.
  • Save the message, number, email, and screenshots.

Prevention tips

  • Save official websites and app links instead of trusting message links.
  • Pause when a request adds urgency, secrecy, or an unusual payment step.
  • Never share one-time codes and deny prompts you did not start.
  • Practice the related eSafe Academy training before a real message arrives.

Related scam guides

Microsoft Support ScamApple ID ScamGoogle Account Scam

Practice safely

Try the matching training scenario

Every guide ends with practice. Use the eSafe Academy training flow to rehearse the safe response before a real message arrives.

Start training