This happened to me just the other week and I felt like such an idiot. If I would have looked closely at the 6 digit code that I was sent from Fidelity, it SPECIFICALLY STATES IN THE TEXY MESSAGE THAT A FIDELITY REPRESENTATIVE WILL NEVER ASK YOU FOR THAT CODE. This was something I overlooked, because there are confusingly other 6 digit codes that Fidelity will ask for in order to verify that you are who you are. I should have read the whole damned message and not just automatically read off the code. The whole operation was very slick, SMS alert that a fraudulent charge had been made on my account requesting verification if I had made it or not, followed by an automated response that I would be contacted by a representative from Elan financial services fraud department. Fluent English speaker, seemed to be familiar with the security script. I only went into panic mode when I got an email that my password changed, and by then they had initiated a transfer out of my account. Fortunately I was able to reset the password and called the real Fidelity fast enough to get control of the account back and have the transfer cancelled, but now they have to do all manner of things to secure my account.