A dating match asks for a verification code

What a dating verification code is

An account verification code is a one-time key used to sign in to an account. Keep account verification codes private. When someone asks for the digits, pause and check the process through the service you opened yourself rather than through the chat that asked for the code. The boundary rests on the request itself, not on guesses about the other person's motives. [FTC: Verification codes]

• Treat any code as account access, not a friendship token
• Do not screenshot or forward the message
• Do not read the code aloud in a call or voice note

Reopen the service independently before you answer

Do not use contact details supplied in a suspicious message. Close the chat, launch the dating service yourself, and look for any notice or verification prompt there. Opening the app from your home screen or a saved bookmark, if you have one, is one way to do this. An absent notice does not prove anything about the other person; it only means the service itself is not showing that request where you can see it. Leave the request unanswered and keep the code private.

• Open the app from your home screen or a saved bookmark if available
• Look for a verification notice inside the service
• If nothing appears, treat the chat request as unconfirmed

Account code versus in-app photo verification

As an editorial distinction, an account code is a login key that belongs to one person's account. A photo or verification step shown inside an app you opened yourself is different from a code to send to another person, but this article makes no claim about how any particular service runs such a step. Use one test: is the instruction shown inside the service you opened yourself? If it is, still keep any login code private. If the instruction arrives only in chat and asks for digits, send nothing. Keep login codes private in every case.

• Ask where the instruction appears
• If it appears only in chat, send nothing
• Keep any login code private even if a step is shown inside the app

When a match links to a free verification site

Some schemes involve fraudulent free verification sites that collect personal or card information and can enroll people in recurring subscriptions. A link like that can look like a simple identity step, but it is not the service's own login flow. If you shared card details, contact the card issuer or bank promptly about suspected fraudulent transactions. Also report the suspicious profile and stop the contact through the service's tools. As editorial guidance, further profile searches cannot recover funds already sent; for money sent, prioritize the payment provider and reporting. [FBI/IC3: New Verification Schemes Target Users of Online Dating Platforms] [FTC: What To Do if You Were Scammed]

• Do not enter card details on a link from a match
• Save the message for the service's report form
• Contact your card issuer promptly about suspected fraudulent transactions

Hypothetical example

Suppose a hypothetical match says the service logged them out and asks you to text back the six digits just sent to your phone. You send nothing. You close the chat, open the dating app from your home screen if possible, and find no matching notice there; that only means the request is unconfirmed inside the app, not that the other person is dishonest. You report the profile and stop the contact. Separately, a hypothetical message invites you to a free verification page; you do not open it. If you had entered card details, the next step would be contacting the card issuer promptly. [FTC: What To Do if You Were Scammed]

• Write a short log of what was asked and when
• Keep codes and card details out of all replies

A message you can send when you decline

A brief decline keeps things clear without arguing. As one editorial option, you could write: 'I don't share login codes with anyone. If the app is asking you to verify, please follow its instructions in the app. I'm happy to keep chatting here.' This is a suggested boundary, not an authoritative script or a test of the other person; you can adapt it or ignore it. It redirects the other person to the service's own process. You do not need to justify the boundary with details about your account. If you prefer to stop the conversation, you can do so without drawing conclusions about the other person from their reply.

• Keep the reply short and neutral
• Avoid debating why codes are private

Stopping rule and next action

Use this editorial rule: if a request is for a login code, card details, or a login step outside the service you opened yourself, stop and send nothing. Keep login codes private. Report the suspicious profile and stop the contact through the service's tools. If card details were shared, contact the card issuer or bank promptly about suspected fraudulent transactions. If money was already sent, contact the payment provider and report it first, since further profile searches cannot recover funds. [FBI/IC3: New Verification Schemes Target Users of Online Dating Platforms] [FTC: What To Do if You Were Scammed]

• Stop when a login code or card detail is requested
• Report the suspicious profile through the service's tools
• As guidance, for money sent, contact the payment provider and report first

A couple more questions