To protect people from such phishing, Signal actively warns users against sharing their SMS code and PIN.

We also want to emphasize that Signal Support will *never* initiate contact via in-app messages, SMS, or social media to ask for your verification code or PIN. If anyone asks for any Signal related code, it is a scam. We make this clear when users receive their SMS code during initial signup.

screenshot of Signal SMS verification

While we build robust technical safeguards, user vigilance is ultimately the best defense against phishing. We will continue to work on mitigating these risks via interface design and signposting throughout the app. In the meantime, please stay alert, and never share your SMS verification code or Signal PIN with anyone.

support.signal.org/hc/en-us/ar

0
2
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.world/users/signalapp/statuses/116200116748574400 on your instance and quote it. (Note that quoting is not supported in Mastodon.)