@mloveday5, please be more careful before you accuse and insult people. The guy who created this plugin has probably spent hundreds of hours building it and helping people use it, all for free.
There might be a bug, but there’s no fraud happening here. None.
After installing/activating the plugin, did you browse to your profile and configure it for your specific user account? Installing it isn’t enough, each user has activate it for their own account.
If you have a Multisite installation, is the plugin activated network-wide, or only on individual sites?
If you temporarily disable all other plugins and switch to one of the default themes, are you still able to login with an incorrect code, or does it only happen when those other plugins/themes are active?