A One-Time Password (OTP) or verification code is a private security key used to confirm access to an account, approve a transaction or authorise an account change. It should only be entered when completing an action you personally initiated.
Fraudsters may impersonate service providers, customer-care agents or trusted contacts to persuade users to disclose these codes. Children and young people may be particularly vulnerable to such requests when they appear through familiar social media accounts, online games, competitions or messages from friends.
Parents and guardians should regularly remind children that an OTP must never be shared even with someone they know online. Encourage them to pause and seek guidance from a trusted adult whenever they receive an unexpected code or urgent request.
Parents are encouraged to teach children to:
- Never disclose an OTP or verification code to anyone.
- Avoid entering codes through links received in unsolicited messages.
- Confirm that they initiated the login, transaction or account change.
- Contact the service provider through its official channels when in doubt.
- Immediately secure the account and report suspicious activity if a code has been shared.
Keep verification codes private. Protect your account and help children recognise that no legitimate service provider will ask them to reveal an OTP.