A code you didn't ask for, or a caller who wants it read back. Here's what Uber says and what to do.
You get a text with a verification code you never asked for, or a call or message from someone saying they work for Uber who wants that code read back to them. The code is real. It is the key to your account, and the person asking for it is trying to sign in as you.
Got a message like this? Check it in seconds.
Check it with ShieldrUber's help page on phishing says: Uber will never call, text, or email you to request your password, verification code, or banking details. It says to be cautious of anybody contacting you for this information. (Uber)
Two notes on sourcing. The page is Uber's help article for merchants and restaurants (Uber Eats Manager), so the account details in it apply most directly to those accounts. The core rule about codes is stated for everyone: never share your OTP with anyone claiming to be an Uber employee, because providing the code could give a scammer access to your account. (Uber)
Uber says that if you receive an unfamiliar one-time passcode email request, an unauthorized person is likely trying to sign in to your account. (Uber) The same logic applies to a text: a code you did not ask for usually means someone typed your phone number or email into a sign-in screen.
That is why the scam works in two parts. The code arrives first. Then a caller or a follow-up text claims to be from Uber, says there was a mistake, and asks you to read it out. Whoever has the code can finish signing in.
Act quickly. Change your Uber password from the official app, review the payment methods and any saved cards on the account, and ask Uber to help through its Help Center. If a card was used, call your bank or card issuer on the number on the back of your card. Uber's page also suggests promptly resetting your email password so fraudsters can't get into your email. (Uber) Uber also suggests setting up a passkey, which lets you sign in with your device's built-in authentication such as Face ID, a fingerprint or a PIN. (Uber)
Share the text, email or voicemail to Shieldr and get a plain-English verdict — safe, suspicious or scam — with the reasons it spotted. It's one more check before you tap anything, not a guarantee.
Get Shieldr on the App StoreUber says it will never call, text or email you to request your password, verification code or banking details, and that you should never share your one-time passcode with anyone claiming to be an Uber employee.
Uber says an unfamiliar one-time passcode request likely means an unauthorized person is trying to sign in to the account. Don't share the code, and check your account in the official app.
Uber says to end the call and contact it through its Help Center, and to confirm emails come from an @uber.com domain. Before you enter a password, check that the address bar shows auth.uber.com or login.uber.com.
Related: the PayPal text scam, is that Amazon text real?, how to check if a link is safe and how to report a scam text.
Shieldr isn't affiliated with Uber. Uber is a trademark of Uber Technologies, Inc. Details are taken from Uber's own page as of October 23, 2026 and may change.