Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it

This article warns about rising 'authentication-in-the-middle' phishing attacks that proxy victims through fake sites, capture credentials, and relay MFA prompts to enable account takeover, sometimes leading to lockouts or financial theft. It recommends defenses such as staying vigilant with links and sponsored results, using security software and password managers, and adopting passkeys, which are resistant to this attack method.