Gmail Moves Away From SMS Codes Toward QR Codes
In short
In February 2025, a Gmail spokesperson told Forbes that Google would move away from SMS verification codes, citing global SMS abuse, and replace them with QR codes scanned by your phone. Google described the rollout as gradual.
In February 2025, Forbes reported that Gmail would start moving away from six-digit codes sent by SMS for sign-in verification. Gmail spokesperson Ross Richendrfer said the goal was to reduce the impact of rampant, global SMS abuse. Instead of typing a texted code, users would see a QR code to scan with their phone's camera.
Google gave two main reasons. A code can be phished, since a scammer can trick someone into reading it out, while a QR check leaves nothing to share. Google also pointed to SMS traffic pumping, where fraudsters trigger large numbers of verification texts to numbers they control and earn money per delivered message.
Google said the change would roll out over several months and did not give a completion date. Later reporting said some users might be asked to send an SMS to Google instead of receiving one. Google recommends passkeys, Google prompts, authenticator apps and security keys over SMS.
For people verifying Google accounts, phone checks have not disappeared, but Google may ask for them less often or in a different form. The tighter Google gets about SMS abuse, the more often it may reject numbers it has seen used too many times. Whatever number you use, it should be for your own legitimate account, and a passkey you control is a sturdier long-term key than any phone number.
What to do
Set up a passkey or Google prompt on your Google account so sign-in no longer depends on texts reaching your phone.
Sources
Related services
Related guides
Creating a Gmail or Google Account Without Your Phone Number
When Google asks for a phone number at sign-up and when it doesn't, how to verify a Gmail account with a virtual number, and how to secure it afterward.
Read the guide →TroubleshootingGoogle Says “This Phone Number Has Already Been Used Too Many Times”
Google says your phone number has been used too many times? What the error means, why it happens, and the legitimate options to finish sign-up.
Read the guide →More news
Discord Starts Global Age Assurance for All Accounts
On September 22, 2026, Discord began a global rollout that places every account in an adult, teen or unconfirmed group based mainly on account signals. Discord says more than 90% of users won't be asked to confirm their age manually.
Read →August 25, 2026WhatsApp Adds Multiple Passkeys, Replaces 2FA PIN
On August 25, 2026, WhatsApp said over a billion people now sign in with passkeys, let accounts add more than one passkey, and replaced the six-digit two-step verification PIN with a longer password. None of it is applied automatically.
Read →August 1, 2026Microsoft Is Phasing Out SMS Codes for Personal Accounts
In August 2026, Microsoft said it will start phasing out SMS as a sign-in and recovery method for personal Microsoft accounts, pushing passkeys, verified email and Apple or Google sign-in instead. It has not published a final cutoff date for consumers.
Read →July 27, 2026UK SIM Farm Ban: Offences Apply From October 29, 2026
The UK's Crime and Policing Act 2026, which received Royal Assent on April 29, 2026, creates offences for possessing or supplying SIM farms without good reason. Home Office guidance published July 27, 2026 says penalties apply from October 29, 2026.
Read →