A TikTok message asks for your verification code or payment details

A supposed TikTok employee may claim a copyright strike, prize, brand deal or account ban is pending and ask you to send a login code. TikTok says it will never contact you to request passwords, verification codes or other sensitive information. A logo, sender name or urgent deadline can be copied. The practical question is whether the action exists in your account's official notifications or support area, not whether the message looks polished.

Before you start​

Do not reply with a code, password, card number or identity document. Do not install a 'verification' app. If you already clicked a link but entered nothing, close it and check the account directly. If you submitted credentials, treat the account and any reused password as exposed.

Do it step by step​

1. Open TikTok independently from your app icon and check Inbox and Account status or the relevant in-app support area for a matching notice. A message in an ordinary chat is not proof of a platform action.
2. Inspect the sender profile and the requested destination. A lookalike URL, external messaging app or request to approve a login you did not start is a reason to stop. Do not use the message's phone number to verify itself.
3. Report the message or account through TikTok's built-in controls, then block the sender if needed. Preserve a screenshot of the claim without exposing any codes if money or threats are involved.
4. If you shared credentials, change the TikTok password from the official app, review Manage devices, remove unknown devices and verify email and phone recovery details. Turn on two-step verification and secure the linked mailbox.
5. If payment details were sent, contact the card issuer or payment service using a known channel. If a scam link was forwarded from your account, tell recipients through another channel and ask them not to use it.
6. Check your account again after a day for a changed bio, new posts, messages or purchase activity. Use TikTok's official recovery path if access has been lost; paid 'account recovery' DMs are not a substitute.

Check the result​

The claimed warning is either confirmed in your own app or treated as fraudulent, the sender is reported, and any exposed login or payment route has been addressed.

If something goes wrong​

If TikTok's settings do show a genuine problem, navigate there from the app and follow its own appeal or support workflow. A genuine notice does not make a separate DM requesting a code legitimate. If the password change fails, secure the recovery email and use official account recovery.

Know the limit​

An email address ending in a familiar domain is one clue, not a complete authenticity test; mail displays and links can be spoofed. Blocking the scammer cannot revoke a code you already shared. TikTok's own guidance is categorical about requests for sensitive information, so do not make an exception for a convincing story. TikTok avoid-phishing guidance TikTok account safety