19/09/2026
Real talk: someone's actively trying to break into my Facebook account right now.
Two "here's your password reset code" messages landed via WhatsApp in the space of a minute. Spoiler: I didn't request either one. Someone out there is trying to reset my password, which means they've either got my number or the email, know it's linked to my account, and are hoping I'll either not notice or hand over the code myself.
This is exactly how a lot of account takeovers happen, not some genius hack, just a scumbag hitting "forgot password" and hoping the real owner slips up or gets social-engineered into forwarding the code.
If you ever get a code you didn't ask for: don't send it, don't type it anywhere someone tells you to, don't "verify" anything with it.
Small, boring habit. Saves you a very bad day.