If someone claiming to be support asks you to read out a code or send a key, the request itself tells you what is going on. Here is why, and what to do next.
Published September 30, 2026 · 2 min read
No. A password, a one-time login code and a key each exist to prove that you, and only you, are entering the account. Real support does not need to be you in order to help you. If a person or bot asks for any of these, the conversation is no longer support, whatever name or logo it uses. The right reaction is to stop and not to explain or negotiate.
Support can look into a problem, explain a status and guide you through the steps that only you can take in the app, all without seeing your credentials. Because help never depends on them, asking for them has no legitimate purpose. The only thing a password, code or key gives the person holding it is access. That is why the request is the warning sign, however polite or urgent the message sounds.
Impersonators often frame the request as a harmless check: "read me the code to confirm it's you" or "to cancel a suspicious login." In reality, the code is what lets them sign in as you at that very moment. Urgency is part of the script, because a rushed person does not stop to think. Watch for these patterns:
Do not answer the question, and do not click any link the message contains. Close the chat, then open the official app yourself and reach support from there, rather than through the contact that wrote to you. The table below shows how common requests map to what is really happening.
| Request | What it really is | What to do |
|---|---|---|
| "Send us your password" | An attempt to sign in as you | Refuse and stop the chat |
| "Read me the code you just received" | A login or confirmation code that lets someone in at that moment | Never read it out; close the conversation |
| "Send your key so we can check the wallet" | A request for full control of your funds | Never send it; support does not need it |
| "Confirm you're the owner by sharing a code" | Impersonation dressed up as a security check | Contact support yourself through the official app |
Yes, in one respect. If your sign-in has no password, there is no password to hand over, and that removes one thing a scammer can ask for. It does not remove the other items: login codes and keys still exist and still must never be shared. Nexus Pay, for example, is opened inside Telegram, and a Google login can be linked as a second way in. Whichever way you sign in, the rule stays the same: what proves it is you stays with you.
Act quickly. Stop talking to the person, then use the official app to check your account. If you have a Nexus Pay card, you can freeze it in one tap and unfreeze it later. Remember that blockchain transfers are irreversible: nobody can bring back a transfer sent to the wrong address. That is why preventing the handover matters far more than fixing it afterwards. As an extra layer, Nexus Pay offers an optional four-digit access code, and the main share of crypto funds is kept in wallets without a permanent network connection.
Opening…