your bank’s website and get you on the phone. Then they click to reset your password and tell you you will receive a verification code and to read it back to them. The verification code they tell you they are sending you is really just them clicking to reset your password. If you give it to them then they can set a new password and get into your account.

It’s a clever tactic. You get a legit verification code from your bank the minute they tell you they are sending one. This is why many banks specifically state in verification code texts that their employees will never ask for it.


Sorry this happened to you. Sounds terrible.