When a business asks Authifly to check it's really you, we send your one-time code over the channel most likely to reach you — WhatsApp, SMS, Telegram, Viber, a voice call or email. If that one misses, we quietly try the next, so your code always arrives.
Your code can arrive on any of these. Whichever one it lands on, here's how to tell a real Authifly code from a fake.
A short message with your code, from a sender showing the business's name or "Authifly". A real one only ever gives you a code — it never asks you to send anything back.
A plain text with your code — no app needed, works on any phone. Genuine codes are short and self-contained; we never text you a link to "confirm" the code.
An in-app message with your code from a verified sender. As with every channel, a real code stands on its own — nobody legitimate will ask you to read it back.
A branded message showing the business or Authifly, with your code inside. Trusted and widely used where it's popular — and just as single-use as the rest.
An automated call that reads your code aloud — handy if a text didn't reach you or you'd rather hear it. A real call only reads the code; it never asks you to press keys or share details.
A clearly branded email with your code, from the business or Authifly. Genuine ones never push you to click a button to "verify" — the code is right there in the message.
You only ever need one code. Behind the scenes, Authifly starts with the channel most likely to reach you and moves down the list if it has to — so a missed text or an offline app never leaves you stuck.
You're signing in, creating an account or approving something, and the business asks Authifly to check it's really you.
We try the channel most likely to reach you first — usually WhatsApp, since it lands fast and you'll spot it right away.
If that doesn't reach you, we try another app you're likely to have open, so the code still pops up where you'll see it.
Still nothing? A plain text reaches any phone, with no app required — the channel that works just about everywhere.
As a last step we call to read your code aloud, or send it to your inbox — so it always reaches you one way or another.
A genuine Authifly code behaves the same way on every channel. If a message ever breaks one of these rules, treat it as a scam.
The sender shows the business you're using, or "Authifly". It's tied to something you just did — like signing in or approving a payment.
A real code is only ever sent to you. We'll never call, text or email asking you to read it out or forward it. If someone does, it's a scam.
Your code is good for a few minutes and can only be used a single time. After that it stops working — even for you.
Wondering why your code showed up where it did? Here are the plain answers.
Whichever one is most likely to reach you, fastest. Authifly looks at where you are and what you're likely to have on your phone, then picks the best fit — often WhatsApp, but it could just as easily be SMS, Telegram, Viber, a voice call or email. You don't have to set anything up; it just arrives.
If the first channel doesn't reach you, Authifly automatically tries the next one — another app, then a text, then a call or email — so the code usually still gets through. If it's taking a while, most businesses let you tap "resend", which starts the process again. Also check you've got signal and that the right number or email is on file.
That's up to the business you're using, not Authifly. Some let you pick "send by text" or "call me instead" right on their sign-in screen; others leave it to us to choose the channel most likely to reach you. Either way, the code itself works exactly the same.
Because, where you are, WhatsApp was the quickest, most reliable way to reach you. It tends to arrive instantly and is easy to spot, so we often try it first. If it hadn't reached you, we'd have fallen back to a text instead — your code would have arrived either way.