The OTP code you were told to read out
The message arrives from the right number, because they caused it to be sent. Why the request itself is the answer, and the one method that cannot be spoken aloud.
Online Scams · section
Phishing
Emails and pages that copy a brand well enough to work, and the detail they always get wrong.
Voice cloning scams and the one rule that defeats them
A convincing clone of a familiar voice now takes seconds of public audio. The defence is not detecting the fake — it is refusing to act on any call you did not place.
Questions this section answers
- The code came from the real bank number — doesn't that mean the call is genuine?
- No. The code is real because the caller started a genuine login with your password, which made the service send it. Its authenticity says nothing about who is on the phone.Answered in The OTP code you were told to read out