Some criminals have been putting programs on random computers to harvest account numbers and password information used to log in to websites. They collect this information, secretly transmit it to their own computers, and attempt to log in to your site. These are called Trojans (short for Trojan Horse) or Key Loggers.
Security codes prevent these fraudsters from completing the log-in process, even if they are able to access your user name and password.