Home / I'm worried about losing my data / Someone Is Asking for My Apple ID Code — Is This a Scam?

Someone Is Asking for My Apple ID Code — Is This a Scam?

A real company never needs your verification code. Anyone who asks for it is trying to get into your account.

You're probably here because a call, text, or email just arrived "from Apple" — or a pop-up appeared — asking you to confirm a verification code. Maybe you got a code you didn't request, and a "support agent" on the phone wants you to read it back to them. Your stomach just dropped, because it sounds official. Let's sort out what's really happening — calmly, before you do anything.

Direct answer: yes — if someone is asking you to read, send, or "confirm" a verification code that you didn't trigger yourself, it's a scam. Apple never asks for your Apple ID password, your two-factor verification code, or your payment details over the phone, by text, or by email. A verification code is meant for exactly one place: the sign-in screen you opened on a device you own. Anyone who wants you to share it out loud or in a message is trying to take over your account.

What that code actually is

When you sign in to your Apple Account on a new device, Apple sends a short code to your trusted devices — the ones you already use. Entering that code proves "yes, this is really me signing in." It's the second layer of two-factor authentication: even someone who knows your password still can't get in without a code from your own device.

That's exactly why scammers want it. They may already have your password (from a data breach, a guessed answer, or a phishing page), but they're stuck without the code. So they try to get you to hand it over. If you share it, they complete the sign-in as if they were you.

The patterns that are almost always scams

A call claiming to be Apple Support. Caller ID can be faked to show "Apple." Real Apple Support doesn't call you out of the blue about a problem you didn't report.
"We see suspicious activity — verify your identity." Legitimate security alerts appear on your own devices and in official apps, not as an urgent phone call demanding a code.
"I'll send you a code, just read it back to me." This is the code-forwarding trick. The code on your screen is yours to enter yourself — never to read aloud or text to someone.
Asking you to approve a login you didn't start. If a prompt appears and you weren't signing in anywhere, don't approve it. That's someone else trying to use your account.
Anything involving gift cards or "urgent payment." No legitimate Apple conversation ends with you buying gift cards to fix a problem.

What Apple actually does — and never does

Real security alerts show up on your own trusted devices, in your Apple Account settings, or in official Apple apps — not as a surprise phone call demanding a code.
Real Apple Support may contact you if you requested help, but it never asks for your password, your verification code, or for you to disable security features like Find My or two-factor authentication.
The one rule to remember: codes are entered by you, into a screen you opened. No employee, no "support line," and no message should ever receive one from you.

What to do right now

Take a breath. This is fixable, and doing it calmly beats doing it panicked:

Don't share the code, don't approve the prompt, and don't call back any number they gave you. End the call or ignore the message. You don't need to argue with them.
If you already shared a code or approved a login you didn't start, change your Apple Account password now at appleid.apple.com. That immediately locks out anyone who was mid-login.
Check your account for devices you don't recognize in the same place — and remove any you didn't add.
Report it. Apple has a page for reporting Apple Support phishing (search "report phishing" on support.apple.com), and you can report suspicious texts and calls to your local authorities or carrier. Reporting helps everyone.

A simple way to decide

One test covers nearly every case: did I trigger this myself?

You were signing in, buying something, or setting up a device → the code is yours to enter into that same screen. No one needs it from you.
A person is asking you to read, type, or send a code → it's a scam. Full stop. End it.
You got a code you didn't request and no one is asking for it → ignore it. Someone tried to sign in; without the code, they can't. You don't need to do anything, though changing your password isn't a bad idea.

You probably don't need to

Panic that your account is already gone. A scammer with a password but no code is still locked out. Changing your password closes the door completely.
Answer unknown callers who say "Apple." If it matters, they'll leave a real way to reach official support — or you can call Apple yourself from the number on apple.com.
Trust caller ID. It's easily spoofed. "Apple Support" on the screen proves nothing.
Worry that every password prompt is an attack. Your phone does legitimately re-ask for your passcode or password sometimes — that's normal and separate from someone asking you to read them a code.

What to do next

Not sure whether something you received is real? Describe what it said and how it arrived via Ask Us, and we'll help you tell a genuine message from a scam before you act.