Account Takeover Scams on Snapchat
How attackers use phishing snaps, verification code requests, and third-party app lures to hijack Snapchat accounts — then use those accounts to scam the victim's friends through trusted-sender messages.
Part of: Account Takeover Scams
Last reviewed: 1 June 2026
Snapchat account takeovers are damaging in two directions. The account owner loses access to years of saved memories, established streaks, and a trusted social identity. More immediately, the hijacked account is used to scam the owner's friends — who receive messages from a face they recognise and are more likely to act on. Because Snapchat's disappearing-content model means there is limited message history to check, victims of the secondary scam have less context to question what is happening.
This guide covers the specific ways Snapchat accounts are compromised — the phishing snaps, verification code requests, and third-party login lures — and the account recovery and protection steps specific to Snapchat.
How this scam works on Snapchat
The most common Snapchat takeover path begins with a phishing snap or DM from a contact's already-compromised account — containing a link that mimics Snapchat's login page or a third-party app requiring Snapchat authentication. Entering credentials on the fake page gives the attacker access. If two-factor authentication is not enabled, the attacker immediately changes the account email and phone number, locking the original owner out.
A second attack vector is the verification code request: the attacker already has the victim's username and password (from a credential stuffing attack using breached data) and is attempting to log in from a new device. Snapchat sends a verification code to the victim's phone. The attacker then messages the victim — sometimes impersonating Snapchat Support — asking them to share the code. Sharing it completes the attacker's login.
Once in control, the attacker typically sends money request messages to the victim's contacts ('I'm in trouble, can you send £50 via Cash App?'), posts stories promoting giveaways or investment schemes, or uses the account to harvest more credentials from other contacts by repeating the phishing link cycle.
Snapchat's account recovery process requires verification through the original phone number or email address — so keeping these details current is critical to any recovery attempt.
Common red flags
- A snap or DM from a friend containing a link to log in to Snapchat or a related service
- A message asking you to share a verification code that was sent to your phone
- A message from a friend asking for money urgently with an unusual tone or phrasing
- A notification that your Snapchat login was attempted from a new device
- Your Snapchat streak disappearing unexpectedly, which can indicate your friend's account was compromised
How to protect yourself
- Enable two-factor authentication on Snapchat: Profile → Settings → Two-Factor Authentication → use an authenticator app rather than SMS where possible
- Never share a verification code sent to your phone with anyone — Snapchat Support will never ask for this
- If you receive a link to 'log into Snapchat' in a snap or DM, navigate to Snapchat directly rather than clicking the link
- If a friend's account appears to be sending unusual money requests, contact that friend through another channel to verify
- Keep your account email and phone number current in Snapchat settings to ensure recovery messages reach you
How to report it
- If you are locked out, use Snapchat's account recovery at accounts.snapchat.com — report the account as compromised
- Report the hijacked account through the Snapchat Support form at support.snapchat.com → 'My Account & Security' → 'I think my account has been compromised'
- Report the specific snap or message that spread the phishing link: press and hold the message → Report
- Report to your national fraud authority if money was sent by contacts who were deceived by messages from your hijacked account
Frequently asked questions
Can I recover my Snapchat account if the attacker changed my email and phone number?
Yes. Snapchat provides an account recovery flow at accounts.snapchat.com that allows you to verify your identity even if the contact details have been changed. You may be asked to provide the original email, phone number, or answer security questions. Act quickly — the sooner you start, the less time the attacker has to further entrench access.
How do I tell my contacts that messages from my hijacked Snapchat were not from me?
Post a notice on another platform your contacts can see — Instagram, Facebook, or WhatsApp — letting them know your Snapchat was compromised and any recent money requests or links from that account were not genuine. Ask anyone who sent money to contact their bank or payment provider immediately.