Google is planning to phase out SMS-based verification codes and replace them with QR codes in the coming months. The company says this change is intended to improve security and reduce the risk of fraud, including the misuse of SMS codes by scammers attempting to create multiple fake Gmail accounts.
Currently, users logging into Gmail and other Google services may receive a six-digit SMS code to verify their identity. With the update, users will instead scan a QR code using their phone’s camera to complete the verification process. Google has not yet provided an exact timeline for the rollout but has stated that more details will be shared soon.
Security concerns have been raised about SMS verification codes, as they can be compromised in different ways. Fraudsters have been known to trick mobile carriers into transferring a user’s phone number to a new device, effectively bypassing SMS-based authentication. Additionally, some criminal operations exploit a practice called traffic pumping, where fraudsters generate a high volume of SMS verification messages to numbers they control, profiting from each message sent.
To enhance security, Google recommends users consider alternative authentication methods, such as authentication apps, security keys, or passkeys. The company also offers “Sign in With Google,” which allows users to approve login attempts through a prompt within other Google applications.
