One of the fastest-growing scams works like this: you receive a 6-digit code by SMS and, seconds later, someone — sometimes posing as a relative or "tech support" — asks you to send it back. If you share it, you lose your WhatsApp account instantly. Here's how it works and how to protect yourself today.
How the scam works
The criminal tries to log in with your number on another phone. As a security step, WhatsApp sends you a verification code by SMS. That code is the only missing piece for the scammer. So they message or call you pretending to be a trusted contact, saying they "sent it to you by mistake" and asking you to pass it along. The moment you share it, they take over your account.
The warning signs
- You get a code you didn't request.
- Right after, someone urgently asks you for that code.
- The message comes from an "acquaintance," your "bank," or "WhatsApp support."
- They pressure you to act fast, without thinking.
The golden rule
It fits in one sentence: that code is never shared with anyone, even if the person asking seems like your mom, your boss, or a company. There are no exceptions. If in doubt, contact the person another way to confirm — you'll find they never asked for anything.
Lock down your account in 2 minutes
Turn on two-step verification: open WhatsApp → Settings → Account → Two-step verification → Turn on, and create a 6-digit PIN. With this on, even if someone gets your SMS code, they can't get in without your PIN. While you're there, limit who can add you to groups: Settings → Privacy → Groups → "My contacts," one of scammers' favorite entry points.
If your WhatsApp was already stolen
- Reinstall WhatsApp and enter your number to receive a new code and regain your session — that kicks the intruder out.
- If you had two-step verification, you'll also need your PIN.
- Tell your contacts you were a victim, to stop the fraud chain in your name.
- Report the case to the authorities in your country.
This trick is part of a wider wave of fraud. Learn the voice side of it in our guide to AI voice scams.
Frequently asked questions
Does WhatsApp ever ask for the verification code?
Never. If someone asks for it — even claiming to be a contact or a company — it's a scam. Don't share it.
Does two-step verification protect me?
Yes. It adds a PIN only you know, so the SMS code alone is no longer enough to steal your account.
How do I recover my account if it was stolen?
Reinstall WhatsApp, enter your number, and use the new code you receive; that ends the intruder's session. You'll need your PIN if two-step verification was on.
