If you bank online, you probably know the routine. You enter your password and then wait for a six-digit code to arrive by text. That extra step is supposed to help prove you are really you. Unfortunately, scammers have learned how to turn those codes against us.