The Signal 9/4/26 - The six digits scammers need you to say out loud

Those six-digit codes your phone gets when you log in somewhere, the show has spent all summer telling you to turn them on. Today is the fine print: the scam where a criminal, already holding your password, triggers a *real* code from your *real* bank and then calls to ask you to read it back "for verification." One rule makes you immune, and it has no exceptions: a code is for typing into a site, never for telling a human.