WhatsApp is one of the most widely used messaging apps in the world, which is exactly why scammers like it. The names change, but nearly every WhatsApp scam pulls the same two levers: urgency and trust. Learn the common formats, turn on two-step verification, and confirm anything urgent through a second channel before you act.
Scams aimed at your account
The verification code scam
The scammer tries to register your number on another phone. WhatsApp sends you a 6-digit code by text message, and the scammer, posing as a friend, a company, tech support or even a buyer on a marketplace site, asks you to "confirm" it or send it back because it "came to you by mistake." If you hand it over, you lose your account on the spot.
Golden rule: your WhatsApp 6-digit code is like your bank password. Never share it with anyone, for any reason. The full story is in our guide to the WhatsApp 6-digit code scam.
The QR code scam
In person or on a video call, the scammer talks you into scanning a QR code. That code actually links your WhatsApp to the criminal's computer, which gives them full access to your conversations.
Defense: only scan a WhatsApp QR code that you generated yourself, on your own computer, at web.whatsapp.com. You can check what is connected to your account under Settings, Linked devices.
The "Hi Mom" new-number scam
A message arrives from an unknown number: "Hi Mom, I got a new number. Can you help me with an urgent payment?" The profile photo is often a real relative's, copied from social media. The request is always the same: money, fast, whether by bank transfer, a payment app, gift cards or crypto.
Defense: call the person's old number, or ask for a video call, before you send anything. Scammers run from phone calls. Because AI voice cloning can make a call sound convincing, it also helps to agree on a family safe word that only real relatives know. We break down this one in how to avoid the "Hi Mom" scam.
Fake prizes, coupons and giveaway links
"Claim your free gift," "exclusive coupon," "anniversary promotion from brand X." The link leads to a fake page that steals your data or installs a malicious app, and it often asks you to forward the message to 10 contacts, which spreads the scam further.
Defense: a real promotion lives on the brand's official website and verified profiles. Do not tap shortened links that arrive in a message, even when they come from a friend.
Fake job offers and paid-task scams
Messages offering pay to "like videos" or "review products" often start by paying small, real amounts to earn your trust. Then they ask for a "deposit to unlock bigger tasks." These are sometimes called task scams, and the deposit never comes back.
A related trick is the fake job post that borrows a real company's name. See how to recognize a fake job offer using a company's name. A real employer does not charge you to start work.
Fake bank or fraud-department support
The criminal calls or messages you pretending to be your bank, warns you about a "suspicious purchase" and offers to help "cancel" it. Along the way, they ask for your password, a security code or for you to install a remote-access app.
No bank asks for your password, a security code or an app installation over WhatsApp. If you are in doubt, hang up and call the number printed on the back of your card yourself.
Fake payment confirmations (if you sell online)
If you sell on Facebook Marketplace, eBay, Etsy, Instagram or straight through WhatsApp, watch for doctored payment screenshots paired with pressure to ship right away. Hand over the product only after you confirm the money is in your own account. A screenshot proves nothing. Check the balance in your bank or payment app, and make sure the funds are available, not just pending.
Checklist: lock down your account in five minutes
- Turn on two-step verification. Go to Settings, Account, Two-step verification, and create a PIN. This is the most important protection against account takeover.
- Hide your photo from strangers. Go to Settings, Privacy, Profile photo, and choose "My contacts." It makes the "Hi Mom" scam harder to pull off.
- Review your linked devices from time to time, and log out of any you do not recognize.
- Lock the app with your fingerprint or face recognition. You will find the option under Privacy settings.
- Distrust urgency. Rushing you is the scammer's main tool. Stop, take a breath and confirm through another channel.
- Block and report any suspicious chat using the options WhatsApp offers inside the conversation.
The same instincts work beyond WhatsApp. Learn how to spot a fake website before you pay, and set up a phone backup so you never lose your conversations if something goes wrong.
If you already fell for a scam
- Warn your contacts right away, so the scammer cannot keep using your name.
- Contact your bank immediately if money moved, and ask whether the transfer can be disputed. Speed matters.
- Report it to the Federal Trade Commission at ReportFraud.ftc.gov, and to your local police if you lost money.
- Recover your account by reinstalling WhatsApp and registering with your number. If you had two-step verification on, you will also need your PIN.
For account recovery steps that match your phone and app version, see the WhatsApp Help Center.
Frequently asked questions
How do I know if my WhatsApp was hacked?
Common signs: you get logged out of the app out of nowhere, contacts tell you about messages you never sent, or an unfamiliar device shows up under Linked devices.
What should I do if I fall for a WhatsApp scam?
Warn your contacts, report the scam at reportfraud.ftc.gov, and call your bank right away if money was sent. Then recover your account by reinstalling WhatsApp and registering with your number.
Does two-step verification stop WhatsApp account takeover?
It is the most important protection. It creates a PIN that is required when your number is registered on another device, which blocks most takeover attempts.
Sources: FTC ReportFraud · WhatsApp Help Center
