The Google Voice Verification Code Scam: Why Strangers Ask for Your 6-Digit PIN
Why scammers replying to your Craigslist or Facebook Marketplace listing ask you to read back a 6-digit verification code, and how to take your number back.
The Google Voice verification scam usually starts minutes after you post an item for sale on Facebook Marketplace or Craigslist, or post a lost-pet flyer. A 'buyer' texts asking to send you a 6-digit code to 'prove you are a real person,' when in reality they are using your cell number to set up a free Google Voice account for scamming others.
To obtain a Google Voice virtual phone number, Google requires the applicant to link and verify a legitimate domestic landline or mobile carrier number. Criminal syndicates operating from overseas cannot generate these accounts directly. Instead, they target public online classified listings, tricking sellers into acting as unwitting verification mules.
Consumer watchdogs and communities like r/Scams sum up the warning signs clearly:
"The scammer wants to create a Google Voice account, which allows them to make free calls within the U.S. and Canada. If you shared a Google code with a scammer, there are detailed instructions that you should follow."
Knowing how this scam works step by step makes it much easier to spot the red flags early and protect your money.
How the Scam Works
Most versions of this scam follow the same three-step playbook to rush you before you can double-check the facts:
- Marketplace Listing Reconnaissance: The adversary identifies public classified listings on platforms like Craigslist or Facebook Marketplace where sellers display personal cellular phone numbers, and initiates contact posing as an interested buyer.
- The Identity Verification Pretext: The buyer claims they have been burned by fake listings and demands proof of the seller's legitimacy: 'To prove you are a real person and not a scammer, I am having Google send a six-digit verification code to your phone. Text me that code so I know you are genuine'.
- The Forwarding Relay Execution: The adversary inputs the victim's phone number into the Google Voice registration portal. When Google's automated systems dispatch an SMS containing a six-digit authorization code to the seller, the seller blindly forwards the code to the buyer. The adversary inputs the code, binding a new virtual VoIP phone number to the victim's carrier routing line.
Why People Fall for It
Scammers don't succeed because victims are gullible. They succeed by taking advantage of normal human habits and trust:
- The Defensiveness Inversion: By preemptively accusing the seller of being a scammer, the adversary puts the mark on the psychological defensive, compelling them to prove their integrity by complying with the request.
- The Triviality Heuristic of Simple PIN Codes: Sellers assume that forwarding a random incoming number code is harmless since it does not expose their banking passwords or credit card numbers.
- Commercial Motivation and Deal Closure: The seller wants to finalize the sale quickly, viewing the code exchange as a minor technical formality required by a cautious buyer.
How to Protect Yourself
Stopping this scam comes down to a few simple verification habits:
- Never Share Two-Factor Verification Codes with Anyone: Internalize the immutable digital hygiene rule that six-digit verification codes sent to your phone are confidential credentials intended exclusively for private input, never for sharing.
- Read Automated Verification SMS Disclaimers: Carefully read the text accompanying incoming verification codes. Google Voice authorization messages explicitly state: 'Google will never ask for this code. Do not share it with anyone'.
- Reclaim Compromised Google Voice Routing Immediately: If you have mistakenly shared a verification code, navigate to
voice.google.com, link your mobile number, and enter a new verification code to reclaim forwarding authority and unlink the fraudulent account. - Use In-App In-Platform Messaging Tools: Conduct all marketplace buyer-seller communications directly within the platform's native messaging interface, avoiding the disclosure of personal cellular phone numbers to unverified strangers.
Collegiate Glossary & Definitional Architecture
Within our counter-fraud research taxonomy, Virtual Carrier Laundering defines the primary operational vector; Verification Relay Ruse represents the underlying psychological or technical exploitation mechanism; and Telecommunication Impersonation encapsulates the institutional framework or statutory defense required to neutralize the threat.
Official Resources & Reporting
To report a scam or read official consumer warnings, check these resources:
Conceived by the author as an initial seed note or prompt, drafted with AI assistance, and personally verified, edited, and refined through hands-on editorial passes.
Collegiate Glossary Cards
Core academic, philosophical, and conceptual terms deployed within this inquiry, calibrated for precision and rigorous critique.
Virtual Carrier Laundering
nounThe illicit registration of domestic VoIP telecommunication numbers using unwitting third parties' legitimate cellular carrier lines as authentication anchors.
Provides offshore fraud rings with verified, domestic Caller ID reputations.
Verification Relay Ruse
nounA social engineering pretext where a scammer claims they are sending a code solely to confirm that an online marketplace seller is a genuine, real person.
Tricks the seller into surrendering their automated account creation OTP.
Telecommunication Impersonation
nounConducting secondary illicit operations, such as robocalls or banking pretexting, masked behind the stolen telecommunication identity of an innocent citizen.
Directs regulatory and police investigations toward the innocent cellular owner.