Here's the calm, plain version of what to do. In most cases there's nothing to worry about.
It only matters if you share it. Keep it to yourself and you can simply ignore it — it expires on its own in a few minutes. If codes keep arriving, it can mean someone has your password and is being stopped at this step; a good moment to change that password.
We will never call, text, or email you asking for a code, a password, or payment. If a message claims to be from Authifly and asks for any of that, it isn't us — don't reply, and don't share the code with anyone, including someone who says they're from support or a bank.
No real company needs you to read out or forward a code. If you want to act on something, open the business's official app or type its website address yourself — don't follow a link from the message.
It happens to careful people, and it's usually caught in time. A few quick steps:
Open the official app or type the address yourself. Don't use a link anyone sent you.
Use the number printed on the back of your card and tell them what happened.
It makes a stolen password much harder to use next time.
Contact the business you were using directly, through their official app or website. For questions about Authifly, or to report a message being misused, email security@bird.com.