The one code you must never share
A one-time password is not a formality — it is the key that authorises the payment. Anyone who has it can take your money.
Who asks for it — and why it is always a trick
Nobody legitimate ever asks. Not your bank, not the police, not a delivery company, not a government office. The code exists precisely so that only you can approve a transaction — so anyone asking you to read it out is trying to become you. All of it is phishing aimed at your code.
“I'm from the bank — read me the code to cancel the fraud.”
“I sent you a code by mistake, please forward it.”
“We need to confirm your identity — tell me the number that just arrived.”
“Your line will be disconnected unless you verify now.”
If you have already shared a code
Speed decides whether the money can be recovered. Act in this order.
- Call your bank's fraud line now — the number on the back of your card. Ask them to freeze the card and stop the transfer.
- Change your banking password and turn on two-step verification.
- Keep the message, the number and any screenshots as evidence.
- Report through the official national channel for your country (below).
Protect yourself before it happens
Never read a code to anyone who contacts you. Turn on two-step verification wherever it is offered. Treat an unexpected code as a warning that someone is trying to access your account — change your password. And check which service the message actually names before assuming it is your bank.
Report it officially
🇦🇪 UAE
Dubai Police eCrime (ecrime.ae, 901) · Abu Dhabi Aman 8002626 · Ministry of Interior e-Crime · emergencies 999.
🇸🇦 Saudi Arabia
Ministry of Interior e-Crime platform · report financial fraud to your bank and SAMA · emergencies 911.
🇶🇦 Qatar
Q-CERT / NCSA [email protected] for cyber incidents · police 999 for fraud.
🇰🇼 Kuwait
CITRA Cyber Security [email protected] · Ministry of Interior cybercrime unit · emergency 112.
🇧🇭 Bahrain
National Cyber Security Center [email protected] · Ministry of Interior economic & electronic security · emergencies 999.
🇴🇲 Oman
OCERT [email protected] for cyber incidents · Royal Oman Police 9999.