Account takeover

WhatsApp Account Takeover Code Scam

Someone asks for a six-digit code, often pretending they sent it by mistake. The code can register your WhatsApp account on their device.

Common script

What the message or call may sound like

I accidentally sent my WhatsApp code to your number. Please forward the six-digit code.

Mechanism

Why this scam works

The request often comes from a compromised friend account, so it feels personal and harmless.

Red flags

Stop when you see these signals

A friend or stranger asks for a verification code
Message says the code was sent by mistake
Urgency or embarrassment pressure
You receive a WhatsApp login code you did not request
Contact asks you not to call
A friend suddenly asking for a 6-digit code that just arrived on your phone
A call claiming to merge, verify, or upgrade your WhatsApp that needs a code

Do now

If this is happening to you

Do not share the code.
Call the person through another channel if the request came from a friend.
Enable WhatsApp two-step verification.
If you shared it, try to re-register WhatsApp immediately and warn contacts.

Do not

Do not forward login codes.
Do not trust a text-only request from a known contact.
Do not ignore alerts that WhatsApp is being registered elsewhere.

Save evidence

Chat screenshot
Time of code request
Phone number involved
Any messages sent from your account after takeover

Prevent repeat risk

Turn on two-step verification in WhatsApp settings.
Never share verification codes with anyone.
Teach family to call before trusting urgent account requests.
Turn on two-step verification in WhatsApp settings so a stolen SMS code alone cannot take the account.
Agree with family that nobody ever asks anyone for codes, and any such message means the sender is already hacked.

Run a check

Use Kaval on this pattern

Answers

Common questions

Can someone take over WhatsApp with only a code?

Yes, the login code can let them register your account on another device unless additional protections stop it.

What should I do if a friend asks for a code?

Do not send it. Call them through a normal phone call or another channel because their account may already be compromised.

Why does someone want my WhatsApp code?

The 6-digit SMS code is the key to registering your number on a new phone. Whoever has it takes over your account and then scams your contacts in your name.

My WhatsApp was taken over. How do I get it back?

Reinstall WhatsApp, log in with your number, and request a new SMS code. That logs the attacker out. If they enabled two-step verification, follow WhatsApp’s recovery flow and warn your contacts meanwhile.

Does two-step verification stop this scam?

Largely yes. With a PIN set, the SMS code alone is not enough to move your account to a new device.

Guides