diff --git a/src/server/cyberhex-code/system/insecure_zone/php/2fa.php b/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
index b8353e3..c29e849 100644
--- a/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
+++ b/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
@@ -66,8 +66,12 @@ include "../../../api/php/notifications/sendmessage.php"; //to send user notific
 										echo '<script>window.location.href = "/system/secure_zone/php/index.php";</script>';
 									}
 								}else {
+									$pin=mt_rand(100000, 999999);
+									$_SESSION["pin"]=$pin;
+									$ip = $_SERVER['REMOTE_ADDR'];
+									send_to_user("[2FA-Pin]\nHello $username\nHere is your pin to log into cyberhex: $pin. If you did not try to log in please take steps to secure your account!\nIP: $ip\n",$username);
 									echo '<div class="alert alert-danger" role="alert">
-													Incorrect pin.
+													Incorrect pin. A new pin has been sent to you via Telegram. The old pin is no longer valid!
 												  </div>';
 								}
 							}