Yes, Bank of America sends verification codes, and here's when you'll receive them
Bank of America sends verification codes — usually six-digit numbers — to your phone or email when you sign into your account from a new device, when you make certain transactions, or when you change account settings. These codes are part of a security feature called two-factor authentication, which adds a second step beyond your password to confirm it's really you.
The code arrives as a text message (SMS) to the phone number on file, or as an email to your registered email address, depending on how you've set up your account. You enter the code into the Bank of America website or mobile app to complete your login or transaction. If you don't receive a code when you expect one, it's usually because your contact information needs updating, or the code was sent to a different device than the one you're using.
Key Takeaways
- Bank of America sends verification codes by text or email when you log in from a new device or browser, as a security measure to confirm your identity.
- You can choose whether to receive codes by text message or email during setup, and you can change this preference in your account settings under security options.
- Codes expire after a set time — usually 10 to 15 minutes — so you need to enter it quickly once you receive it.
- If you don't receive a code, check that your phone number and email address are current in your account profile, and make sure your phone can receive text messages.
When Bank of America sends you a verification code
Bank of America sends a verification code in several situations. The most common is when you log into your account from a device or browser the bank hasn't seen before — a new phone, a new computer, or an incognito window. The bank does this to make sure someone who stole your password can't access your account without also having access to your phone or email.
You'll also receive a code when you perform certain high-risk actions, such as transferring money to a new recipient, changing your password, updating your contact information, or adding a new beneficiary to an account. Some transactions — like wire transfers or large payments — may trigger a code even if you're on a trusted device.
Bank of America may also send a code if it detects unusual activity on your account, such as a login from an unexpected location or at an unusual time. This is an automatic security measure and doesn't mean your account has been compromised — it's the bank being cautious.
How to receive verification codes from Bank of America
When you first set up two-factor authentication on your Bank of America account, you choose how you want to receive codes: by text message to your mobile phone, or by email to your registered email address. You can set this up during your initial account creation or later in your security settings.
To change how you receive codes, log into your Bank of America account online or in the mobile app, go to Settings, then Security, and look for the option labeled "Two-Factor Authentication" or "Verification Code Delivery." From there, you can select text message or email, and confirm the phone number or email address where you want codes sent.
If you have both a phone number and email on file, Bank of America may send the code to both, or it may ask you to choose one as your primary method. Some accounts also offer the option to use the Bank of America mobile app itself to approve logins — you'll see a notification on the app instead of receiving a code by text or email.
What to do if you don't receive a verification code
If you're waiting for a code and it doesn't arrive, the first step is to check that your contact information is correct. Log into your account (if you can) and go to Settings or Profile to confirm your phone number and email address are current and spelled correctly. If your phone number has changed recently, update it there.
If you can't log in because you're waiting for a code, check your spam or junk email folder — sometimes legitimate codes end up there by mistake. Also check that your phone can receive text messages; if you're on Wi-Fi only and not connected to cellular service, text messages won't arrive.
If you've updated your contact information and still don't receive a code after a few minutes, try requesting the code again. Most Bank of America login screens have a "Resend Code" button. If that doesn't work, you may need to contact Bank of America directly by phone at the number on the back of your card, or through the find message center in your online account.
How long verification codes last
Bank of America verification codes typically expire after 10 to 15 minutes. This means you need to enter the code into the login screen or transaction screen while it's still valid. If the code expires before you enter it, you'll see a message asking you to request a new one.
The short expiration time is intentional — it's a security measure. If someone intercepts or guesses your code, it won't work after a few minutes. If you receive a code but get interrupted before you can use it, straightforward request a new one by clicking the "Resend Code" or "Send New Code" button on the screen.
Keeping your verification codes find
Never share your verification code with anyone, including Bank of America employees. Bank of America will never ask you for your code over the phone, by email, or through a text message. If someone contacts you asking for a code, it's a scam — hang up or delete the message.
Keep your phone and email find, since verification codes are sent to those devices. Use a strong password on your email account, and make sure your phone is password-protected. If you lose your phone or think someone has access to it, contact Bank of America right away to update your verification method.
If you receive a verification code you didn't request, don't enter it. Instead, log into your account and change your password when ready, then contact Bank of America to report suspicious activity. A code you didn't ask for usually means someone tried to log in with your username and password.
Frequently Asked Questions
Can I turn off verification codes?
Bank of America requires two-factor authentication for most accounts, so you cannot turn it off completely. However, you can choose whether to receive codes by text or email, and you can add trusted devices so you don't have to enter a code every single time you log in from your home computer.
Why did I get a verification code I didn't request?
Someone may have tried to log into your account using your username and password. The code was sent to you as a security measure — they can't complete the login without it. Change your password when ready and contact Bank of America if you see more unexpected codes.
What if I don't have my phone with me when I need to log in?
If you set up email as your backup verification method, you can receive the code there instead. You can also use a trusted computer that Bank of America has already verified, which may not require a code for routine logins. Contact Bank of America if you're locked out and can't access either your phone or email.
Do I need a verification code every time I log in?
No. Bank of America lets you mark a device as "trusted" after you enter a code once. Trusted devices won't require a code for future logins from that same browser or app, though you may still need one for sensitive transactions like transfers or password changes.