Online dating · Account safety
A match asks for your login code. Should you share it?
Keep the code to yourself
Do not send a login or verification code to a dating match, even if they say it proves you are real. A code can let someone enter an account. Stop the conversation and use the app’s own report or block tools if you wish. If you already shared it, open the account provider’s app or website yourself and follow its recovery instructions. Change the password when you can, and check the provider’s advice for securing the account.
After a busy week, adult professional Zahra receives a message from her match, Amani: “I want to know you are real. Please send the code that just came to your phone.” Zahra did not start a login. She likes their conversation, but the request involves access to her account, not just a polite introduction.
Three things to keep private
The codeKeep it on your own device.
The linkOpen the service yourself instead.
The accountUse its official recovery steps if the code was shared.
A code is for your account, not a date
A code sent to your phone or email may be part of a sign-in or password reset. The US Federal Trade Commission says someone who asks for your verification code may be trying to access your account. Do not read it aloud, forward it, or type it into a link your match sends.
The FTC guidance concerns verification codes. It cannot identify who requested this particular code or promise that every unexpected message has the same cause.
A clear reply
A reply that closes the request
Invented messages between adult daters Zahra and Amani.
- Amani
- “Send me the code so I know you are real.”
- Zahra
- “I do not share login codes. I am ending this conversation.”
- Zahra
- “I will check my account through its own app.”
Zahra sets a limit and checks the account through a route she chooses.
End the request without explaining your life
Zahra can say, “I do not share account codes.” She can then stop replying, block or report the account through the dating app. She does not need to send a photo of her ID, a screenshot, or another private detail as a substitute.
An app may have its own verification feature. Open the app yourself and check its help pages; do not follow a match’s instructions to share a code.
Choose your next step
Did you share the code?
- No
Keep it private and stop or report the request if you wish.
- Yes
Use the provider’s own recovery and security instructions now.
- You cannot access the account
Use the provider’s official recovery channel and contact your bank directly if relevant.
A kind conversation cannot verify an account request
Amani may sound patient or urgent. Neither tone tells Zahra who is behind a request. She can keep dating at her own pace and decide whether she wants further contact. The FTC and eSafety offer risk-reduction advice; no single step guarantees account security.
Keep reading
Keep your accounts and choices yours
Sources and what they can tell us
Zahra, Amani and their messages are invented. Recovery steps depend on the account provider; the examples are practical guidance, not a guarantee.
- US Federal Trade Commission: What’s a verification code?
It warns that sharing a verification code can give someone access to an account.
Limit: It cannot tell who requested Zahra’s code; US agency guidance may reference US services. - US Federal Trade Commission: How to recover your hacked email or social media account
It explains account recovery and security checks after possible unauthorized access.
Limit: Recovery steps vary by provider and this source does not guarantee recovery. - eSafety Commissioner: Online dating
It discusses privacy and reporting concerns on dating platforms.
Limit: Australian guidance cannot identify this match or guarantee safety.
Questions about login codes
What if my match says the code is just for verification?
A match does not need your account login code. Keep it private and check any app verification feature inside the app.
Does an unexpected code prove my account is hacked?
No. It is a reason to check your account through the provider, but it does not by itself establish what happened.
Should I send my ID instead?
Do not send private documents to a match to replace a code. Check the platform’s own help if you want to understand its verification process.