What are the red flags of this scam?

You receive a 6-digit code by SMS from WhatsApp without requesting it — this means someone is trying to register WhatsApp on a new device using your number • Immediately after the SMS, a WhatsApp message from a known contact asks for that code — the contact's account was already taken over; this is now targeting you • The message claims the code was 'sent by mistake' or 'for a group/Zoom meeting' — these are pretexts; WhatsApp codes are only ever for account registration • A WhatsApp contact asks for any multi-digit code using unusual urgency or a flimsy reason — hang up and call them directly to check • After sharing the code, you are suddenly unable to log in to WhatsApp — your account has been taken over

What should I do if this happened to me?

Never share your 6-digit WhatsApp SMS code with anyone — WhatsApp will never ask for it on someone else's behalf, and no legitimate contact ever needs it • If you receive a code you didn't request, ignore the SMS and enable two-step verification immediately: Settings → Account → Two-Step Verification → Enable • If you have already shared the code: go to WhatsApp and log in — WhatsApp will send a new code and log out the attacker. Act within minutes before they enable a PIN to lock you out permanently • Warn your WhatsApp contacts immediately that your account may have been compromised and to ignore any unusual messages or money requests from your number • If you are locked out and cannot re-register, report to WhatsApp at support@whatsapp.com and through the in-app 'Lost Phone / Can't Access' flow • Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

HIGH phishing Last reported: 6 Oct 2026 Share

A WhatsApp contact asks you to forward a 6-digit code — and immediately hijacks your account

Q: Is this a scam?

Yes. This is a documented scam pattern. A message from a known WhatsApp contact asks you to share a 6-digit code you just received by text. The code is actually your WhatsApp login verification — handing it over locks you out and gives criminals your account to scam your contacts.

A message from a known WhatsApp contact asks you to share a 6-digit code you just received by text. The code is actually your WhatsApp login verification — handing it over locks you out and gives criminals your account to scam your contacts.

Also known as: WhatsApp verification code scam, WhatsApp account hijack UK, six digit code WhatsApp scam, WhatsApp account stolen UK, WhatsApp code takeover

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Never share your 6-digit WhatsApp SMS code with anyone — WhatsApp will never ask for it on someone else's behalf, and no legitimate contact ever needs it
2 If you receive a code you didn't request, ignore the SMS and enable two-step verification immediately: Settings → Account → Two-Step Verification → Enable
3 If you have already shared the code: go to WhatsApp and log in — WhatsApp will send a new code and log out the attacker. Act within minutes before they enable a PIN to lock you out permanently
4 Warn your WhatsApp contacts immediately that your account may have been compromised and to ignore any unusual messages or money requests from your number
5 If you are locked out and cannot re-register, report to WhatsApp at [email protected] and through the in-app 'Lost Phone / Can't Access' flow
6 Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

Red flags

⚠ You receive a 6-digit code by SMS from WhatsApp without requesting it — this means someone is trying to register WhatsApp on a new device using your number
⚠ Immediately after the SMS, a WhatsApp message from a known contact asks for that code — the contact's account was already taken over; this is now targeting you
⚠ The message claims the code was 'sent by mistake' or 'for a group/Zoom meeting' — these are pretexts; WhatsApp codes are only ever for account registration
⚠ A WhatsApp contact asks for any multi-digit code using unusual urgency or a flimsy reason — hang up and call them directly to check
⚠ After sharing the code, you are suddenly unable to log in to WhatsApp — your account has been taken over

Known variants

Call-forwarding variant: criminal convinces victim to dial a GSM code such as **21*[number]# which silently forwards all calls (including WhatsApp verification calls) to the attacker. WhatsApp then calls the forwarded number instead of the victim, completing the takeover without an SMS being shared.

Last seen: 10/6/2026

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Known variants

Sources