A single phone call, a familiar-looking logo, and a six-digit code received by SMS were enough to erase years of professional training rights in France. The person on the other end of the line knew the victim’s name, part of their social security number, and used official-sounding language that seemed authentic. Within 48 hours, the victim's training rights had been transferred to a fake program they had never chosen, resulting in a loss of nearly 4,000 euros. The incident began with a call from an unknown number. The caller, posing as a counselor from Mon Compte Formation, claimed the victim’s training rights were at risk and offered assistance. Using technical terms like CPF (a French system for professional training credits), France Compétences, and eligible training catalog, the caller asked for a six-digit code sent via SMS to verify the victim’s identity. The victim received an SMS from a legitimate system called FranceConnect and shared the code with the caller, believing it was part of a standard verification process. This allowed the scammer to enroll the victim in a fake training program and drain their training credits. The next day, the account showed a near-zero balance, with a program listed that the victim had never chosen. The scammer’s script was well-rehearsed, using language that closely matched that of official organizations. Personal details used in the call were likely obtained from data leaks or hacked databases, making the scam more convincing. The SMS itself came from a legitimate system, as FranceConnect automatically sends these messages to secure connections. However, the issue was giving the code to a third party. This code acts like a key to a safe—while it is in the user’s possession, it cannot be used by anyone else. Once it is shared, even verbally, it loses its protective function. The Caisse des Dépôts, which manages the CPF system, never initiates calls. No legitimate organization should ever ask for your FranceConnect identifiers. All communication about training accounts should happen exclusively through the official platform, in writing, or through procedures started by the user. No counselor, agent, or training partner will ever ask for a one-time code over the phone. If a CPF scam is suspected, the first step is to change passwords on the Mon Compte Formation and FranceConnect platforms immediately. This can prevent further unauthorized access. It is also important to report the incident to Mon Compte Formation’s customer service, keeping all written records of the interaction, and to use the official online fraud reporting platform. Filing a complaint with the police or gendarmerie is also essential, as it provides formal proof for any future reimbursement or dispute. The victim emphasizes that no serious administration ever asks for a security code by phone. Remembering this rule and sharing it with others could help prevent similar experiences.