---

Posted on Wednesday, May 14, 2025 in Privacy & Security

Scam of the Week: Device Code Hijacking

Cybercriminals have come up with a new way to scam you by using device codes, which are numeric codes that allow you to log into the same account using multiple devices. You may have used these codes in the past. If you’ve ever attempted to log in to a streaming service such as Netflix from your TV, your TV will display a numeric code that you can enter on your phone. Once you enter the code on your phone, your TV will be automatically logged in to your Netflix account, without needing to log in each time you watch.

In this scam, you receive an email or text message with a device code. The message instructs you to click a link and log in using the code. However, the message you received was actually sent by a cybercriminal. They attempt to log in to your account, which generates the device code. They send the code to you, and if you use it to log in, the cybercriminal will gain control of your account. This code allows them to access your private information from their device. In this situation, the device code allows logins from multiple devices, but one of them belongs to a cybercriminal!

Follow these tips to avoid falling victim to a device code phishing scam: 

• Never attempt to login with a device you did not request. Remember, a genuine device code will only be sent to you if you start the login process.

• Use multi-factor authentication (MFA) on your accounts. MFA requires you to provide extra identification when logging in, and it can help you keep your account more secure.

• If you receive any suspicious messages, always report them by following your organization’s reporting process.

Stop, Look, and Think. Don't be fooled. 

Article provided by:

KnowBe4.com 

1. account security
2. ai
3. app
4. artificial intelligence
5. cyberattack
6. cybercriminal
7. cybersecurity
8. data leak
9. digital
10. email fraud
11. facebook
12. false information
13. holidays
14. malware
15. mobile app
16. money
17. news
18. phishing
19. phone
20. qr code
21. ransomware
22. red flags
23. scam
24. security
25. sensitivity
26. shopping
27. social media
28. tax
29. taxes
30. text
31. travel