2 min read
The never-share list
Keep these to yourself, always:
- Your full password.
- A one-time code (2FA or verification) — even if a caller says they sent it.
- Your authenticator setup key or a passkey.
- Full card details or online-banking credentials in response to any unsolicited request.
No genuine Credit Corp contact will ever ask for these. Anyone who does is impersonating us.
Why these in particular
Each of these is a master key. A one-time code hands over your second factor; a full password bypasses the first; a passkey or setup key clones your ability to sign in. Fraudsters ask for exactly these because they're what stands between them and your account. The rule is simple: we never ask, so anyone who does is a scam.
What we might legitimately ask
To verify you, we may ask for limited, non-secret details tied to the account, or a code we've sent that you then enter yourself — never one you read back to a caller. If you're ever unsure, hang up and call back on a trusted number. See how we verify your identity.
If you've shared something
If you've given out a password or code, act now: change your password, confirm 2FA, review sessions, and report it — see reporting suspected fraud.
Frequently asked questions
Will you ever ask me to read back a code?
Never. A code we send is for you to enter yourself. Anyone asking you to read a code back to them is a fraudster, even if they claim to be from us.
Is it safe to give my account number to prove who I am?
Limited, non-secret details can be part of verification, but never your full password, a one-time code, or full banking credentials. When unsure, call back on a trusted number.
I shared a code — what now?
Change your password immediately, confirm 2FA and review your sessions, then report it so we can watch the account. Speed limits any damage.
Related reading
How we verify your identity on the phone
Before we discuss or change anything sensitive, we verify that it is really you. Here is what that involves,…
Read →
How to recognise genuine Credit Corp communications
Knowing what a genuine Credit Corp message looks like is your best defence against impersonation. We will never…
Read →
Reporting suspected fraud to Credit Corp
If you spot something wrong — a scam pretending to be us, a strange login, an unexpected change — report it…
Read →
What to do if you shared your password
If your password has been shared, phished or reused somewhere breached, change it now and turn on 2FA — in…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.