Everyday decision 05 of 10

verification code: Agency Check Share less icon

Share less: codes, IDs, and details a task doesn't need

Most tasks need less than they ask for. This page covers what to keep to yourself, starting with a verification code, and what to do if you already shared it.

Example 01

A buyer asked for the code sent to your phone?

Don't share it. A real buyer never needs a code sent to your phone. That code is how someone sets up an account on your number, often a Google Voice number they can use to scam other people.

Right now

Tap each step as you do it.

All three done.

If you already shared the code

  • Change your Google account password and turn on two-step verification.
  • Take your number back from any Google Voice account that was set up with it. Go to voice.google.com and follow the steps to reclaim a number linked to another account.
  • Report it to the FBI's Internet Crime Complaint Center at ic3.gov, and report the buyer in the marketplace app.

The pattern

Sellers expect buyers to be a little cautious, so “I just want to make sure you're real” sounds reasonable. That's why it works.

The tell is where the code goes: your phone. A code sent to your phone proves something to a service, not to a buyer. When someone asks you to read it back, they're using your number to verify an account they control. The couch was never the point.

Some versions add a little pressure, like “Lots of people are interested, I need to confirm first.” A code request plus pressure is the pattern.

IllustratedAn illustrated example: a couch buyer asks for a code, and how a second look helped Tyler decide.

What Agency Check shows

If your agent is handling replies for you, say “Check this first.”

Agency Check never needs the code itself. When your agent shares the text, the digits are removed before anything is checked.

Agency CheckShare less
Pause and verify
The message says

“Hi! Still have the couch? Before I come get it I need to make sure you're real. I'm sending a 6-digit code to your phone, just tell me what it is.”

Pressure cues
  • “Prove you're real”
Worth a second look
  • Someone is asking for a code, password, or card number. Codes like this can open or take over an account.
  • The text that came with the code says not to share it
Next stepDon't share it. Offer another way to continue.
Decline and offer another wayContinue anyway

Agency Check reviewed what you shared. You decide what happens next.

What this check looks at

When you're about to share, send or submit something, Agency Check points out:

  • Anyone asking for a code, password, card number or Social Security number
  • A service's own text saying “don't share this”
  • A request for your ID before there's a real offer
  • Optional fields on a form that are filled in with sensitive details, like an SSN, a license number, medical history or income
  • Defaults that share more than you'd pick, like a photo release “with full name”

When it says Pause and verify: always, when someone asks for a code, password or card number. For forms and defaults, it lists what's optional so you can submit only what's required.

What it never does: store or pass along a code, submit anything, or decide for you. It never gives a score or calls anything safe.

Coming soon to Muse and any agent chat

How to use it

Before your agent acts, say it out loud or type it. Agency Check reviews what you shared and hands back one Decision Card.

See how Agency Check works
Try saying

“Check this first. The buyer wants the code that was just texted to me.”

Questions

Why would a buyer want my verification code?

To set up an account, often a Google Voice number, tied to your phone number. They can then use that number to scam other people while it looks like it's yours.

Can I share just part of the code?

No. Don't share any of it. Nobody legitimate needs any part of a code that was sent to you.

Is it a scam if they want to “verify I'm real”?

Verification that goes through your phone number is a red flag. A real buyer can see your listing, message you in the app, and meet you. That's verification enough.

What if my agent already sent the code?

Follow the “If you already shared the code” steps above today. Then tell your agent never to share verification codes. In Muse, a standing instruction like “Never share verification codes” helps.

Sources

Frameworks behind this check

Research and guidance

  1. AARP, “How to Avoid Google Voice Scams When Selling Online”aarp.org/money/scams-fraud/google-voice-scams/

Last reviewed September 27, 2026. Agency Check is an independent tool from Cyber Strategy Institute, built on its open frameworks and coming soon to Muse and any agent chat. Muse is a trademark of Meta Platforms, Inc.All ten checks on the Agency Check hub

Find your exposure first. Free AI governance assessment — instant score, no sales call required. Score Your AI Risk in 8 Minutes Book a Strategy Briefing Cyber Strategy Institute

Prevention, not detection. Engineered certainty for AI governance, endpoint defense, and critical infrastructure.

1207 Delaware Ave #3397
Wilmington, DE 19806

Solutions

AI Governance

Industries

Company

© 2019–2026 Cyber Strategy Institute. All rights reserved. Privacy Policy Terms of Service

Stop Threats Before They Execute

Your free Kernel-Level Defense Buyer’s Guide is ready to download.

By providing my email address, I consent to receive emails and text messages—including newsletters and marketing communications—from creators of Warden Secure, Cyber Strategy Institute, our flagship zero-trust platform for ransomware prevention, and agree to the Terms and Privacy Policy. You may unsubscribe at any time.