RCode RedPublic Incident Log
← All Reports
MediumPhishing Alert

Fake rideshare 'support' calls are draining driver earnings accounts

Drivers report calls from numbers spoofed to match the rideshare app's real support line, walking them through steps that hand over account access.

Filed
Jun 25, 2026
Region
Rideshare drivers, urban markets
Filed By
Dispatch Desk
Read Time
4 min read

Rideshare drivers in several cities report a phishing call pattern where the caller ID is spoofed to match the app's real driver-support number, and the caller already knows the driver's name and recent trip history — details that make the call feel legitimate from the first sentence.

How the call unfolds

The caller claims there's a 'security flag' on the driver's account related to a recent fraudulent trip and that earnings are being held until it's resolved. To 'verify identity,' the driver is asked to read back a one-time code that was just texted to their phone — which is, in reality, the login verification code for the driver's own account, sent because the scammer is actively attempting to log in.

Once the driver reads back the code, the scammer gains full account access and redirects the driver's payout method to a different bank account or card, often before the driver realizes anything is wrong.

Why it's convincing

  • Caller ID spoofing makes the call appear to come from the platform's real support line
  • The caller references real, recent trip details, likely from a prior data leak or by asking leading questions the driver confirms unknowingly
  • Payout urgency is an effective pressure point for gig workers relying on that income

What to know

A legitimate platform will never ask a driver to read back a one-time login code over the phone — that code exists specifically so the platform never has to ask for it. Any call requesting it, regardless of what the caller ID shows, should be treated as an active account takeover attempt.

If you've already shared a code

Log into your account from the official app immediately and change your password, then check and reset your payout method in account settings. Contact the platform's support through the app directly, not a phone number from the suspicious call, and report the incident so the platform can flag the receiving account.

#account takeover#gig work#phishing