Where does the 28581 text message come from?

28581 is Cash App’s official short code.

It’s used for sign-in codes, payment notifications, and security alerts.

The code itself is legitimate—but scammers exploit it. If you didn’t request a code, someone may be trying to access a Cash App account tied to your phone number. Don’t share it.

Who owns the short code 28581?

  • Registered to Cash App (Block, Inc., formerly Square)
  • Industry: fintech / peer-to-peer payments
  • Short code type: standard (non-premium)
  • Historical/secondary listing: Avation Health (appears in older registries)

Other short code directories identify 28581 as associated with Cash App, and confirm the same registration.

On top of that, Cash App users on Reddit consistently report receiving messages from this number in the format “Cash App: xxx-xxx is your sign in code.” 

Why you got a text from 28581

  • Sign-in code—you (or someone else) logged in to or tried to log in to a Cash App account tied to your number
  • Two-factor authentication—a security code verifying your identity during a sensitive action
  • Transaction alert—incoming payment, outgoing transfer, or payment confirmation
  • Security notification—unusual activity detected on your account, like a login from a new location

Sign-in codes are the most common reason people search for this number. If you didn’t initiate a login, someone likely entered your number by mistake—or is actively trying to break in.

Quora users confirm these codes are “sent directly to your phone number via SMS” as part of Cash App’s authentication process. Reddit discussions show users regularly receiving unexpected codes, with responses pointing to either typos or unauthorized access attempts.

Is the 28581 short code safe or a scam?

Threat level: HIGH

  • You requested a code → safe, standard communication
  • Verification code you didn’t request → suspicious, don’t share it
  • You don’t have Cash App → likely harmless, wrong number entry
  • Message asks for your code or login details → scam

The short code is legitimate. The concern is what happens after you receive the message.

There are three scenarios when you get a text from 28581:

Scenario 1: You’re logging in (legitimate) 

You initiated a login, created an account, or changed security settings. This is normal behavior.

Scenario 2: Someone mistyped their number (harmless)

Another person accidentally entered your phone number during sign-up. This happens more often than you’d think. Reddit users who don’t even have Cash App report this regularly.

Scenario 3: An account takeover attempt (dangerous)

A hacker obtained your phone number and is trying to trigger a password reset or account access. This is the most concerning scenario.

When you receive an unexpected code, think of it as someone standing at your front door. They haven’t opened it yet—and they won’t be able to unless you hand them the key. Florida Tech’s IT security team explains that unexpected verification codes typically mean someone is trying to access your account, but if you don’t share the code, they can’t get in.

How the scams work

Account takeover attempts

Attackers obtain phone numbers from data breaches and try to log in to Cash App accounts. The system sends verification codes to the real phone owner. Reddit users confirm that phone numbers are being used to hijack accounts, and Quora discussions show how widespread these attempts have become.

Phishing messages

Scammers can spoof the 28581 number to make fake messages look legitimate, then send links to counterfeit Cash App login pages that steal credentials. The FTC warns about unexpected text scams targeting financial app users, and a separate FTC alert explains how scammers design these messages to look convincing.

Social engineering

Scammers follow up texts with phone calls, claiming to be Cash App support and requesting verification codes or login credentials. They create urgency to pressure victims into sharing information. The Minnesota Attorney General provides detailed guidance on these smishing tactics.

Cash App’s own help center is clear on this point: their support team will never ask for your sign-in code.

Red flags to watch for

FeatureLegitimate Cash App messagePhishing attempt
ContentSign-in code, payment alert“Verify your account now” with a link
RequestsNo action beyond entering your codeAsks for PIN, password, or code via reply
ToneInformational, no urgencyUrgent, threatening account closure
Follow-upNonePhone call from “Cash App support”

Be on high alert if you see:

  • Unsolicited codes—you receive a sign-in code without requesting it
  • Unexpected links—the message includes a URL you weren’t expecting
  • Follow-up calls—someone phones you shortly after the text and asks for the code
  • Impersonation—a caller claims to be “Cash App support” and requests the code for “verification”
  • Pressure tactics—the message creates urgency or threatens account closure if you don’t act immediately

What to do if you receive a short code from 58083 

If you see any of these red flags, take immediate action.

If you have a Cash App account:

  1. Open Cash App and reset your Cash PIN immediately. (Instructions here)
  2. Enable Security Lock to require a PIN, fingerprint, or Face ID for every transfer. (Instructions here)
  3. Check Profile > Personal and remove any unrecognizable emails or phone numbers to sign out unauthorized devices. (Instructions here)
  4. Review the Activity tab for unauthorized payments. (Instructions here)

If you don’t have a Cash App account:

If you received a message from 28581 but don’t have Cash App, here’s what’s likely happening: someone tried to create or access an account using your phone number. 

Could be an innocent typo. Could be someone testing whether your number is active.

What you should do:

  • Simply ignore and delete the message
  • Don’t share the code with anyone
  • Don’t click any links in the message
  • Monitor your phone for additional suspicious texts.

Reddit users who’ve experienced this confirm it’s usually harmless—someone entered the wrong number by mistake. Neither scenario means your identity has been stolen.

How to report suspicious messages

Whether you have a Cash App account or not, reporting helps protect others:

File with the FTC—at reportfraud.ftc.gov for phishing attempts requesting payment or personal info. The FTC provides detailed instructions on recognizing and reporting spam texts.

Forward to 7726 (SPAM)—works across most carriers. This helps mobile carriers identify and block scam messages. 

Report to Cash App—if you have an account, use the official app to report suspicious messages or account activity.

FAQ

Does the Cash App send text messages?

Yes. Cash App uses short codes like 28581 to send payment notifications, sign-in codes, and security alerts. Users can manage these preferences in their Profile settings within the app.

Why did I get a text from Cash App with a code I didn’t request?

Two likely explanations. First, someone may have entered your phone number by mistake during sign-up or login—this is more common than most people realize. Second, someone could be attempting to gain access to a Cash App account using your phone number. Florida Tech’s IT department explains that unsolicited codes typically mean someone is trying to access an account without authorization.

Is 28581 a scam number?

The number itself is legitimate—it’s owned and operated by Cash App. However, it can be exploited in smishing (SMS phishing) attacks. Scammers may call you claiming to be Cash App support and ask you to share the code sent to your phone, or they may spoof messages that appear to come from this number. The FTC warns about these tactics targeting financial app users.

Can 28581 call me?

No. 28581 is a text-only short code. It cannot make phone calls. If someone calls you claiming to be from Cash App and references a code sent from 28581, it’s a scam. Cash App support does not make unsolicited phone calls requesting verification codes.

How do I report spam texts from 28581?

Forward the suspicious text to 7726 (which spells SPAM on your keypad). The Minnesota Attorney General and Essex Police recommend this method. You can also report through the official Cash App app and to the FTC.

What if I don’t recognize the login attempt, but I do have a Cash App?

Someone may have your username or phone number and is attempting to log in. Do not share the code. Open Cash App immediately and:
– Reset your cash PIN immediately. (Learn more)
– Go to “profile” > “personal” and remove unknown emails/phones to log out unauthorized devices. (Learn more)
– Enable Security Lock to require Face ID or a PIN for all transfers. (Learn more)
– Review the Activity tab for unauthorized transactions. (Learn more)
Reddit discussions confirm that these unauthorized login attempts are common, but your account remains secure as long as you don’t share the verification code.

Is this article helpful?
YesNo
Scroll to Top