The Indiana Office of Technology has learned of a new scam involving temporary or device codes—the kind of codes you may see and use when signing in online without your password.
An attacker may send you a message asking you to enter a code. The message may look legitimate, but the attacker actually created the code to sign in to your account.
If you enter the code, you could unknowingly approve their access to your account.
The important thing to remember:
If you did not request a device code, do not enter it or share it with anyone.
If you receive a suspicious request involving a device code and you did not request it, the Indiana Office of Technology suggests reporting it as spam.
