They try to log in
The scammer enters your phone number into WhatsApp on their own device.
Urgent cyber alert
WhatsApp account takeover scam
An unexpected verification code may mean someone is trying to access your account. They only need one thing from you: the 6-digit code.
- Never share your code
- Two-step verification
- Check linked devices
Know the trick
How the takeover works
The scam relies on a real code from WhatsApp and a convincing story. Here is the usual sequence.
You receive a code
WhatsApp sends a genuine 6-digit verification code to your phone.
They ask you for it
Posing as a friend, courier or "support", they urge you to send the code back.
You're locked out
They take over your account, then message your contacts asking for money.
Red flag: any message, call or contact asking for a code you did not request, or saying it was sent "by mistake", is a takeover attempt. Do not reply.
Four habits that protect you
Secure your account today
Small habits, big protection. Each one closes a door the scammer is trying to open.
Never share your 6-digit code
Your verification code can give someone access to your account. Keep it to yourself, always.
Enable two-step verification
Add an extra layer of security with a PIN only you know, so a stolen code is not enough.
Review linked devices
Regularly check and log out any session or device you don't recognise.
If you lose access, recover it officially
Use WhatsApp's official in-app account recovery steps to regain access safely.
Step by step
Do it in two minutes
Follow the guide, then tick off your checklist.
- Open WhatsApp and go to Settings.
- Tap Account → Two-step verification.
- Tap Turn on and choose a 6-digit PIN.
- Add a recovery email address you can access.
Never share this PIN either. Menu names can vary slightly by phone and app version.
- Open Settings → Linked devices.
- Review every device and session in the list.
- Tap any you don't recognise and choose Log out.
- Repeat regularly, especially after an unexpected code.
Unknown device? Log it out and enable two-step verification immediately.
- Don't share it or reply to anyone asking for it.
- Turn on two-step verification if it isn't already active.
- Warn your contacts if someone messages them from your number.
- If you're locked out, follow WhatsApp's official in-app recovery steps.
Contact WhatsApp support only from inside the app, never through links sent to you.
If you lose access to your account
Follow WhatsApp's official in-app account recovery steps to regain access safely. Do not use unofficial recovery services.
Protect your family and community
One taken-over account can reach everyone in your contact list. Protecting yourself protects the people who trust you.
- Talk to your familyExplain the scam to parents, grandparents and friends, and help them turn on two-step verification.
- Warn your contactsIf a message from a friend asks for a code, tell them through another channel such as a phone call.
- Report suspicious messagesReport the sender in WhatsApp and share this page so others can be warned.
Questions
Frequently asked
Quick answers to the most common worries.
I got a code I didn't ask for. Am I hacked?
Not necessarily. It usually means someone typed your number to log in. As long as nobody gets the code, they can't enter your account. Ignore it and enable two-step verification.
A friend asked me to send them a code. Is that real?
No. Your friend's account has probably been taken over. Contact them through another channel, such as a phone call, to confirm.
Does WhatsApp ever ask for my code?
No. WhatsApp support will never ask you to share your verification code.
Can two-step verification be bypassed?
It makes a takeover much harder because the attacker would also need your PIN. Keep the PIN private and use a recovery email you control.
Verification codes are confidential. Think before you share.
Help protect your family, friends and colleagues. Pass this page on.