When an access code is normal

A code may be expected when signing in from a new device, after clearing cookies, after changing browsers, or when additional verification is required. It should match an action you personally started.

When an access code is suspicious

A code is suspicious if you did not start a login, someone calls or texts asking for it, or a message pressures you to act quickly. In that case, do not share the code.

Do not reply with the code.
Do not approve prompts you did not start.
Change passwords through official channels if compromise is suspected.
Notify your company administrator if this is a business account.

Repeated or expired codes

Requesting multiple codes can cause confusion. Use the newest code only, wait for delivery delays, and avoid rapid repeated attempts that can trigger lockouts.

FAQ

Can support ask for my one-time code?

You should not share one-time codes with anyone who contacts you. Use official channels and follow the bank’s instructions.

What if I get a code unexpectedly?

Treat it as suspicious and verify your account through official channels without clicking unknown links.