If someone unexpectedly asks you to read out a code sent to your phone or email, stop and verify the request independently.
Never rely on the caller's number, message, or link to decide whether the request is legitimate. Contact the organisation using an official channel you find yourself.
If you already shared the code, secure the affected account immediately and check for changes to passwords, recovery details, devices, payments, or beneficiaries.
A genuine urgent request does not make a verification code safe to share.