Is a text with a Cash App sign-in code a scam?

How to spot the Cash App scam

• A code arrived that you did not ask for. That is not a glitch. It means someone with your email or phone number is standing at the login screen trying to get in, and the only thing still stopping them is the code on your phone.
• Anyone asks you to read it back, by call, text or DM. Cash App states its representatives will never ask for your sign-in code, and the FTC's guidance is blunter still: a verification code is for you and nobody else.
• A phone number is attached to the message, or a call follows within seconds. The timing is engineered, so that the call feels like a response to the text rather than the reason for it.
• The caller already knows details about you, which feels like proof and is not. Names, email addresses and partial card numbers circulate in breach data.
• You are told a payment you never made is pending, for a specific amount. The figure is invented to make you act before you look.
• There is a link. A genuine code message needs no link, because the code is the whole message.

What to do now

1. Do not read the code to anyone, and do not type it anywhere except the Cash App login screen you opened yourself.
2. If you did not request it, change your Cash App PIN and your email password, since whoever is trying already has one of your identifiers.
3. Turn on Security Lock so a payment cannot leave without your passcode, Face ID or Touch ID.
4. Contact support only through the app or cash.app/help. Cash App runs one phone line, 1 (800) 969-1940, and states it is the only number customers can call.
5. Sign out of devices you do not recognise, then forward the text to 7726 (SPAM).
6. If money has already moved, report the unauthorized transfer in-app and keep the reference. The CFPB's January 2025 order requires Block to investigate unauthorized transfers and pay redress where owed.