Skip to content
Account takeover

WhatsApp Account Takeover Code Scam

Someone asks for a six-digit code, often pretending they sent it by mistake. The code can register your WhatsApp account on their device.

See what to do now Open the message check

The request may sound like this.

I accidentally sent my WhatsApp code to your number. Please forward the six-digit code.

Why the request feels convincing.

The request often comes from a compromised friend account, so it feels personal and harmless.

Stop when you see these signals.

  • A friend or stranger asks for a verification code
  • Message says the code was sent by mistake
  • Urgency or embarrassment pressure
  • You receive a WhatsApp login code you did not request
  • Contact asks you not to call
  • A friend suddenly asking for a 6-digit code that just arrived on your phone
  • A call claiming to merge, verify, or upgrade your WhatsApp that needs a code

If this is happening now.

  1. Do not share the code.
  2. Call the person through another channel if the request came from a friend.
  3. Enable WhatsApp two-step verification.
  4. If you shared it, try to re-register WhatsApp immediately and warn contacts.

Do not.

  • Do not forward login codes.
  • Do not trust a text-only request from a known contact.
  • Do not ignore alerts that WhatsApp is being registered elsewhere.

Save this evidence.

  • Chat screenshot
  • Time of code request
  • Phone number involved
  • Any messages sent from your account after takeover

Reduce repeat risk.

  • Turn on two-step verification in WhatsApp settings.
  • Never share verification codes with anyone.
  • Teach family to call before trusting urgent account requests.
  • Turn on two-step verification in WhatsApp settings so a stolen SMS code alone cannot take the account.
  • Agree with family that nobody ever asks anyone for codes, and any such message means the sender is already hacked.

Questions people ask

Can someone take over WhatsApp with only a code?

Yes, the login code can let them register your account on another device unless additional protections stop it.

What should I do if a friend asks for a code?

Do not send it. Call them through a normal phone call or another channel because their account may already be compromised.

Why does someone want my WhatsApp code?

The 6-digit SMS code is the key to registering your number on a new phone. Whoever has it takes over your account and then scams your contacts in your name.

My WhatsApp was taken over. How do I get it back?

Reinstall WhatsApp, log in with your number, and request a new SMS code. That logs the attacker out. If they enabled two-step verification, follow WhatsApp’s recovery flow and warn your contacts meanwhile.

Does two-step verification stop this scam?

Largely yes. With a PIN set, the SMS code alone is not enough to move your account to a new device.

Use a focused check