ThinkCritical.eu · Manipulation atlas
Scams and data theftRequest for sensitive data
PINs, passwords, verification codes, card or ID numbers – a legitimate organisation won't ask for them like this.
PINs, passwords and text-message codes are the keys to your money and accounts. Whoever has them can pay, log in as you, or use a photo of your ID to take out a loan in your name.
Message from a friend: “I sent a six-digit code to your phone by mistake – can you forward it to me? Quickly please, it’s urgent.”
How to spot it
- Someone wants your PIN, password, full card number, a code from a text message or a photo of your ID.
- The request comes by phone, chat, email or in a social media comment.
- A code “sent by mistake” – it is really the key to your account.
- The reason sounds sensible: a refund, account verification, signing up for a job.
How to check and what to do
- Never share PINs, passwords or text-message codes with anyone – not your bank, not the police, not a friend.
- Read the whole text message with the code: it usually says what the code is for – logging in, a payment or a change of settings.
- If you’re not sure, call your bank on the number on the back of your card.
- If you have already given your details away, call your bank immediately, block your card and change your passwords.
Tip: A code from a text message is like a signature. Forwarding it means signing something you haven’t read.
Full explanation and exercises:
thinkcritical.eu/en/manipulation-atlas/data-request