The Help Desk Needs Your Security Code!

Protect yourself

Never share a one-time code or approve an unexpected MFA request. Contact your real IT department.

How it works

A caller posing as IT support asks for your login verification code or tells you to approve a security notification on your phone.

The scammer already has your password and is stuck at the multi-factor prompt. Your code, or your tap on "Approve", is the last thing standing between them and your mailbox.

Red flags

A login prompt or code arriving while someone is on the phone with you
Repeated push notifications until you approve one
"IT" asking you to read a code back to them

If it already happened

If you already paid or gave access: hang up and call your bank from the number on your card to stop or reverse the payment, change any password you read out, and if you installed software or granted remote control, disconnect the computer and call your IT provider. Report the call at reportfraud.ftc.gov.

Where OpenEFA fits

Email filtering can't stop a phone call. The defense here is a habit: hang up, and call back on a number you already trust.

Scam Watch No. 08 · EFA Security · efasecurity.com/scam-watch/ · Print this page and post it where your team will see it.

No. 07: The IRS Is Threatening Arrest! No. 09: Your Email Password Expires Today!

Part of the OpenEFA MailGuard Scam Watch series. Published October 21, 2026 by the EFA Security team. Share it freely; a link back is appreciated.

At a glance

Type: Phone Scam
Channel: Phone Scams (Vishing)
They want: Money, usually by gift card, wire or cash app, or remote access to your computer
One rule: Your MFA code is the last lock. Never read it to anyone.

Post it in the breakroom

This page prints as a one-sheet poster with no menus or sidebars.

Print this alert

Get these by email

One short alert when something needs your attention. No marketing, one-click unsubscribe.

All 24 alerts

Phone, email and text message scams, each on one page.

Scam Watch index