What To Do if You Receive an OTP Code You Didn’t Request

Receiving a One-Time Password (OTP) code that you didn’t request over text or email could be a sign that someone is trying to log in to one of your online accounts to gain access to your private information. An OTP code is a numeric code used as an additional form of verification to authenticate users before they can log in to their accounts. As the name suggests, this code can only be used once. Receiving an OTP code that you didn’t request could mean that someone else is trying to log in to your accounts, so it’s important to act quickly.

Keep reading to learn more about OTP codes and the steps you should take if you receive one you didn’t request.

What it means if you receive an OTP code you didn’t request

When you receive an OTP code you didn’t request, it could mean several things are happening.

The notification is part of a phishing scam

An OTP code could be sent in an attempt to hack your private information through phishing. In phishing scams, cybercriminals send messages to their targets, hoping they will click on a link or download an attachment. Once they’ve done so, the cybercriminal will gain access to their target’s personal data.

Someone is trying to log in to your account

One of the most common reasons why people receive OTP codes without requesting them is because someone else is attempting to log in to their account. This is a strong sign that your login credentials have been compromised, which means someone else could access your account without your permission. If you receive an OTP code you didn’t request, quickly change the password for that online account.

Someone accidentally typed in your username, email address or phone number

A harmless option for why you might be receiving an OTP code that you didn’t request is that someone accidentally typed in your username, email address or phone number without any malicious intent. For some apps and websites, all you need to enter before gaining access is a username and the OTP code; they don’t require you to enter a password. For example, if your username is plantlover97 on an online account and someone else’s username is plantlover98, they could have made a typo and are not trying to steal your information.

Steps to take if you receive an OTP code you didn’t request

If you have received an OTP code you didn’t request, there are several steps you should take to protect your online account and private information.

Change your password

Since you are receiving an OTP code without requesting it, someone most likely has access to your login credentials. Immediately changing your password is the best way to secure your account if you suspect that your password has been compromised. An easy course of action is to use a password manager like Keeper^®, which can generate strong and unique passwords for you.

Enable another method of MFA

Setting up an additional form of MFA on your account is a great idea to ensure the safety of your private information. If you’ve received an OTP code that you didn’t request, you should enable another type of MFA, such as your fingerprint. By adding another form of MFA to your account, you can rest easy knowing your account is more secure.

Don’t share the OTP code with anyone

Because an OTP code is another security measure for you to get into your account, you do not want to share this code with anyone. If someone calls or messages you asking for an OTP code, do not give it to them because this would give them full access to your account. 

Don’t click on any links in the OTP code message

If you did not request an OTP code, avoid clicking or downloading anything associated with the message you receive since it could be part of a phishing scam. You should always check that an unsolicited link is safe by previewing the URL without clicking it and using a URL checker like Google Transparency Report. As you check the safety of the link, make sure not to accidentally click the link – only copy and paste as you verify its legitimacy.

Keep an eye on your online accounts for suspicious activity

Watch out for suspicious activity on your online accounts if you’ve received an OTP code out of the blue. For example, if you received an OTP code for your bank account, monitor your account for unusual transactions or purchases, large transfers of money or significant changes to your credit score.

Protect your online accounts with Keeper

Although sometimes you may receive an unwarranted OTP code as an innocent mistake, it’s better to be safe than sorry by taking the proper steps to protect your online accounts. Keep your accounts safe by changing your password as soon as you receive an OTP code that you didn’t request. You can make these easy changes with the help of Keeper Password Manager’s password generator. Keeper can also securely generate and store 2FA codes, so you can enhance the security of your accounts with ease.

Begin a free 30-day trial of Keeper Password Manager today to start making your online accounts safer.