If you use the passcode option in the DUO mobile app, you should never share that code with anyone.
UAB IT is investigating a rash of phishing attempts in which a scammer gains control of an account, then impersonates Office 365 support or AskIT and asks an individual for a DUO code, thereby allowing them to gain control of the account.
Legitimate IT support professionals will never ask you for your DUO code.
If you receive a suspicious phone call, hang up. If you receive a suspicious email, report it with one click using the PhishNotify button or by forwarding the email to