Where does the 99398 text message come from?

99398 is Klarna’s primary short code.

It’s used for verification codes, purchase confirmations, and security alerts. But Klarna isn’t the only sender—this is a shared short code managed through Twilio, so services like Tinder, Wealthsimple, Indeed, Twitch, and Plenty of Fish also use it.

The code itself is legitimate—but scammers exploit the confusion it creates. If you didn’t request a code, don’t share it with anyone or click any links in the message.

Who owns the short code 99398?

• Primary owner: Klarna (Swedish fintech, buy-now-pay-later)
• SMS aggregator: Twilio (leases the code to multiple companies)
• Other verified senders: Tinder, Wealthsimple, Indeed, Twitch, and Plenty of Fish
• Regional usage: Premium service number in Canada; also documented in Puerto Rico

Datingzest.com lists 99398 among Tinder’s SMS verification short codes.

The shared nature of this code is why you might receive messages for completely different services from the same five-digit number. SMS aggregators lease these numbers to multiple companies simultaneously.

Why you got a text from 99398

• Verification code—you logged into Klarna, Tinder, Wealthsimple, or another service that uses this short code
• Two-factor authentication—a security code verifying your identity during a login or account change
• Purchase confirmation—a Klarna buy-now-pay-later transaction, especially first-time purchases or higher amounts
• Account security alert—password changes, payment method updates, or suspicious login attempts from unrecognized locations

The verification codes are the most common reason people search for this number. If you didn’t initiate a login, someone likely entered your number by mistake—or is actively trying to access an account tied to your phone number.

Is the 99398 short code safe or a scam?

Threat level: MODERATE

• You requested a code → safe, standard communication
• Verification code you didn’t request → suspicious, don’t share it
• You don’t use any of these services → likely harmless, wrong number entry
• Message asks for your code or includes suspicious links → scam

The short code is legitimate. The concern is what happens after you receive the message.

There are four scenarios when you get a text from 99398:

Scenario 1: You requested the code (safe)

You initiated a login, made a Klarna purchase, or changed account settings. This is the system working correctly. Enter the code where prompted and you’re done.

Scenario 2: Someone mistyped their number (harmless)

Someone accidentally entered your phone number during sign-up or when setting up 2FA. This happens more often than you’d think. You get their code, but since you don’t have their password or account access, there’s no security risk. Ignore the message or reply STOP to opt out.

Scenario 3: An account takeover attempt (dangerous)

You receive an unsolicited code because someone has obtained your username and password—through a data breach, phishing, or password reuse. They’re trying to log in but can’t complete the process without the 2FA code sent to your phone. The code landing in your inbox actually means the security system is working. Reddit’s r/Scams discusses whether these messages represent genuine access attempts.

Scenario 4: A phishing follow-up (dangerous)

After the code arrives, you get a call or text from someone claiming to be Klarna support. Facebook groups document reports where scammers “saying they were from Klarna” called about “a purchase pending for 399.99” trying to extract codes from victims.

How these scams work

Credential stuffing attacks

Hackers obtain username/password pairs from data breaches, then use automated tools to test these credentials across hundreds of websites. When they try logging in to your Klarna or Wealthsimple account, the service sends a 2FA code to your phone. 

The attack fails unless they trick you into providing that code. Reddit’s r/UKPersonalFinance features users questioning Klarna verification code spam, while r/Scams discusses whether these messages are mistakes or scam attempts.

Social engineering follow-ups

Scammers exploit the confusion and anxiety unexpected codes create. They monitor for verification code deliveries, then quickly call or text pretending to be from the company. They create urgency—”We’ve detected a $799 purchase we need to verify”—hoping you’ll share the code before thinking critically.

Fake purchase notifications

You receive a message claiming you’ve bought something expensive, with instructions to “verify your identity” or “cancel the order” by clicking a link or calling a number. These lead to phishing sites or human operators who request your verification code.

Red flags that signal danger

Feature	Legitimate message from 99398	Phishing attempt
Content	Six-digit code + service name only	“Verify your account now” with a link
Requests	No action beyond entering your code	Asks for PIN, password, or code via reply
Tone	Informational, no urgency	Urgent, threatening account closure
Follow-up	None	Phone call from “Klarna support”

Watch for these warning signs:

• Unsolicited codes—you receive a verification code without requesting it
• Suspicious links—the message includes a URL you weren’t expecting
• Follow-up calls—someone phones you shortly after the text and asks for the code
• Fake purchases—the message mentions an expensive purchase you didn’t make
• Pressure tactics—urgency about account closure, fraudulent charges, or security issues
• Multiple rapid codes—several codes arrive within minutes without you requesting any.

Legitimate verification codes from 99398 arrive only when you initiate an action. They contain only the code and the service name. They never include links, never come with follow-up phone calls, and never ask you to take additional action beyond entering the code where you triggered it.

Short code comparison

Short Code	Primary Owner	Usage Type
99398	Klarna	Security/OTP, purchase verification
227898	Capital One	Fraud alerts, account notifications
22395	Tinder/Airbnb	2FA, login verification

Capital One’s SMS terms outline standard practices for short code usage, emphasizing that legitimate companies never call to request verification codes sent via text.

What to do if you receive a code from 99398

If you requested the code

Check where you’re trying to log in or what purchase you’re completing. The code should arrive within seconds of your request. Enter it in the app or website where prompted—make sure you’re on the official platform, not a link from the text message.

If you have an account but didn’t request a code

Your credentials may be compromised. Take these steps immediately:

1. Don’t share the code with anyone, regardless of who they claim to be.
2. Log in to your account directly through the official app or by typing the website address yourself.
3. Check recent activity for unauthorized logins, purchases, or account changes.
4. Change your password to something strong and unique that you don’t use anywhere else.
5. Enable or verify 2FA settings are active on your account.
6. Review connected devices and remove any you don’t recognize.
7. Contact the service through official support channels if you see suspicious activity.

If you don’t have an account with the service

Someone probably mistyped their phone number when creating an account or setting up verification. You’re not at risk since they don’t have the account credentials, but you should:

1. Ignore the message and delete it.
2. Reply “STOP” to opt out of future messages from that short code.
3. Don’t click any links that might be in the message.
4. Block the number if messages persist over multiple days.

If you already shared a code

Act quickly. Sharing a verification code essentially hands someone the keys to your account. Immediately:

1. Log in to the affected account if you still can.
2. Change your password right away.
3. Log out of all devices using the account security settings.
4. Check for unauthorized changes to your email, phone number, or payment methods.
5. Contact the service to report the compromise and freeze your account if needed.
6. Monitor for fraudulent charges and dispute any unauthorized transactions.

Google Voice support threads document cases where “someone claimed my number” after users replied to verification codes.

How to report suspicious messages

• Forward to 7726 (SPAM)—works across most carriers and helps them identify and block malicious traffic.
• Report to the service provider—Klarna has a phishing report form on their website, and other companies maintain similar reporting channels.
• File with the FTC—at reportfraud.ftc.gov for phishing attempts requesting payment or personal info.

Blocking and opting out

If you want to stop receiving messages from 99398:

• Reply “STOP” to any message from the short code.
• Use your phone’s built-in blocking features to prevent future messages.
• Contact your carrier about blocking short code messages if spam persists.

Keep in mind that blocking 99398 will prevent all messages from this code—including legitimate verification codes from any service using it. If you actively use Klarna, Wealthsimple, or Tinder, blocking may prevent you from logging in or completing transactions.

FAQ