Account Takeover Scams on Snapchat
How attackers use phishing snaps, verification code requests, and third-party app lures to hijack Snapchat accounts — then use those accounts to scam the victim's friends through trusted-sender messages.
Part of: Account Takeover Scams
Last reviewed: 1 June 2026
Snapchat account takeovers are damaging in two directions. The account owner loses access to years of saved memories, established streaks, and a trusted social identity. More immediately, the hijacked account is used to scam the owner's friends — who receive messages from a face they recognise and are more likely to act on. Because Snapchat's disappearing-content model means there is limited message history to check, victims of the secondary scam have less context to question what is happening.
This guide covers the specific ways Snapchat accounts are compromised — the phishing snaps, verification code requests, and third-party login lures — and the account recovery and protection steps specific to Snapchat.
How this scam works on Snapchat
The most common Snapchat takeover path begins with a phishing snap or DM from a contact's already-compromised account — containing a link that mimics Snapchat's login page or a third-party app requiring Snapchat authentication. Entering credentials on the fake page gives the attacker access. If two-factor authentication is not enabled, the attacker immediately changes the account email and phone number, locking the original owner out.
A second attack vector is the verification code request: the attacker already has the victim's username and password (from a credential stuffing attack using breached data) and is attempting to log in from a new device. Snapchat sends a verification code to the victim's phone. The attacker then messages the victim — sometimes impersonating Snapchat Support — asking them to share the code. Sharing it completes the attacker's login.
Once in control, the attacker typically sends money request messages to the victim's contacts ('I'm in trouble, can you send £50 via Cash App?'), posts stories promoting giveaways or investment schemes, or uses the account to harvest more credentials from other contacts by repeating the phishing link cycle.
Snapchat's account recovery process requires verification through the original phone number or email address — so keeping these details current is critical to any recovery attempt.
Common red flags
- A snap or DM from a friend containing a link to log in to Snapchat or a related service
- A message asking you to share a verification code that was sent to your phone
- A message from a friend asking for money urgently with an unusual tone or phrasing
- A notification that your Snapchat login was attempted from a new device
- Your Snapchat streak disappearing unexpectedly, which can indicate your friend's account was compromised
How to protect yourself
- Enable two-factor authentication on Snapchat: Profile → Settings → Two-Factor Authentication → use an authenticator app rather than SMS where possible
- Never share a verification code sent to your phone with anyone — Snapchat Support will never ask for this
- If you receive a link to 'log into Snapchat' in a snap or DM, navigate to Snapchat directly rather than clicking the link
- If a friend's account appears to be sending unusual money requests, contact that friend through another channel to verify
- Keep your account email and phone number current in Snapchat settings to ensure recovery messages reach you
How to report it
- If you are locked out, use Snapchat's account recovery at accounts.snapchat.com — report the account as compromised
- Report the hijacked account through the Snapchat Support form at support.snapchat.com → 'My Account & Security' → 'I think my account has been compromised'
- Report the specific snap or message that spread the phishing link: press and hold the message → Report
- Report to your national fraud authority if money was sent by contacts who were deceived by messages from your hijacked account
Frequently asked questions
Someone I trust on Snapchat is asking me for money or a verification code — how do I know if their account was hijacked?
Sudden, urgent requests for money, gift cards, or a login/verification code — especially with unusual phrasing or pressure to act fast — are strong signs the account has been taken over, not that your friend is really messaging you. Contact that person through another channel (a phone call or different app) to confirm before sending anything or sharing a code, since a hijacker relies on you trusting the familiar username and photo.
I think my own Snapchat account was taken over — what should I do immediately?
Try to log in and change your password right away; if you're locked out, use Snapchat's account recovery process to regain access and report the compromise. Warn your close contacts through another channel that your account may send scam messages, remove any suspicious third-party apps you connected, and turn on two-factor authentication once you're back in.
Why do these scammers ask for a "verification code" specifically?
That code is Snapchat's real login verification code, and if you share it, you're handing the attacker the exact credential they need to complete a takeover — no legitimate support request or "friend" recovering their own account should ever need your code. Snapchat, like most platforms, will never call or message asking you to read a code out loud.
Can I recover my Snapchat account if the attacker changed my email and phone number?
Yes. Snapchat provides an account recovery flow at accounts.snapchat.com that allows you to verify your identity even if the contact details have been changed. You may be asked to provide the original email, phone number, or answer security questions. Act quickly — the sooner you start, the less time the attacker has to further entrench access.
How do I tell my contacts that messages from my hijacked Snapchat were not from me?
Post a notice on another platform your contacts can see — Instagram, Facebook, or WhatsApp — letting them know your Snapchat was compromised and any recent money requests or links from that account were not genuine. Ask anyone who sent money to contact their bank or payment provider immediately.