Stripe Link Verification Code Not Requested? What to Do

If the message says "Your Stripe verification code is," Stripe Support identifies it as a Link checkout code. Link lets people save and reuse payment information for faster checkout, and it verifies identity on a new site or device. Link says an unrequested message can also follow a remembered device or a phone number entered by mistake. Do not share, reply with, or enter the code. Go to Link directly instead of using a message link. If you have a Link account, review Activity and Login Activity, then use logout or official support if something is unfamiliar.

For the rule across other senders, use what an unrequested verification code means. The steps below are specific to Link.

Match what happened to the four signals below. Then take the least destructive official account action that fits the evidence.

Match the code to the likely cause

A code alone does not prove that a charge completed or that someone entered your account. It proves that a verification message was triggered. Use account records to decide what happened.

Use Link's official route in order

1. Leave the code unused. Do not read it to a caller, forward it, or type it into a page you did not open.
2. Navigate to Link directly. Type the Link address or use a trusted bookmark. Do not use a button or phone number from the message.
3. Review purchases. Link directs account holders to Activity. Match the merchant, amount, and date against transactions you recognize.
4. Review logins. In Link Settings, open Login Activity to inspect prior logins.
5. End remembered sessions. If a device or login is unfamiliar, use Link's log-out-all-devices control. This is narrower than deleting the account.
6. Escalate account evidence. If Activity shows a transaction you did not make, Link recommends reporting it to your bank. If you believe the Link account was compromised, secure the email account and contact Link support.

If the message asks you to call a number or visit a lookalike site, stop and use the verification-email phishing checklist.

Do not delete the account blindly

Deletion is an option, not the first response to one stray code. Link says deletion removes saved cards, address information, and purchase history, and the account cannot be reinstated. It can affect subscriptions sold through Link and access to purchase protections. Some saved bank connections or identity documents need separate deletion steps.

Review Activity, Login Activity, subscriptions, and purchase-protection records first. If the only evidence is one unused code and no unfamiliar activity, logging out devices or contacting support preserves more information while you investigate. If you delete, start from Link Settings or Link's official form, not from the message.

Illustrative example

On 2026-10-22, a person receives one Link SMS while not shopping. They leave the code unused, open Link directly, and find no unknown purchase or login. The evidence fits a remembered device or mistyped number better than a completed takeover. They log out all devices and keep the account because they still use Link.

If Activity shows an unknown purchase, the route changes: contact the bank and Link support. If Login Activity shows an unknown session, log out all devices and secure the email account. The account evidence, not the code alone, chooses the response.

Keep the product boundary clear

This guide concerns the consumer Link checkout experience named in the message. It does not troubleshoot a Stripe seller dashboard, an identity-verification request, or a merchant's checkout configuration. Use the product name and official destination before acting. A familiar Stripe name does not make a caller trustworthy.

MagicLess does not read SMS and is not a Stripe or Link account-security tool. It cannot review purchases or logins, end sessions, stop fraud, or recover an account. If a genuine code arrives by email during a checkout you started, use it only in that flow. See MagicLess compatibility for supported boundaries.

FAQ

Is Link the same as a Stripe Payment Link?

No. Link is the saved-checkout experience involved in these messages. A merchant can use other Stripe checkout products. Identify the product before following support steps.

Does an unexpected Link code mean my account was hacked?

Not by itself. Link lists a remembered device and a mistyped phone number as possible causes. Check Activity and Login Activity for evidence.

Should I reply to or share the verification code?

No. Leave it unused. Do not send the code to an incoming caller or message.

How do I review Link activity safely?

Open Link directly. Use Activity for purchases and Settings, then Login Activity, for prior logins. Avoid links in the unexpected message.

Should I delete my Link account after one unexpected code?

Not before review. Deletion is irreversible and removes saved cards, addresses, and purchase history. Check activity, subscriptions, and purchase protections first.

Claim ledger