How do I spot a fake WhatsApp verification code request?
Fraudsters posing as friends or WhatsApp support ask for your six-digit verification code to take over your account — never share a verification code sent to your phone with anyone.
Last reviewed: 10 June 2026
Explanation
WhatsApp account takeover is typically executed through a social engineering call or message from someone pretending to be a friend or family member. They claim that they accidentally sent a verification code to your number, or that WhatsApp support needs your code to fix a problem. In reality, the code was sent because they are trying to register your phone number in WhatsApp on a new device — your code is the final step.
Once an attacker has your WhatsApp account, they can read your messages, contact all your saved contacts posing as you, and most commonly, ask those contacts for urgent money transfers — continuing the cycle of fraud.
Verification codes sent by WhatsApp are explicitly labelled 'DO NOT SHARE THIS CODE' in the message itself. WhatsApp support never proactively contacts users asking for their code, and legitimate friends never have a reason to need your phone's verification code.
If your account is taken over, you can recover it by re-entering your phone number in the WhatsApp app, receiving a new verification code, and logging in. Enable two-step verification in WhatsApp Settings > Account > Two-step verification to prevent future takeovers.
Common red flags
- Anyone asks for the six-digit code WhatsApp sent to your phone
- Message claims WhatsApp sent the code to your number 'by accident'
- Someone claiming to be WhatsApp support asks for your verification code
- Contact you recognise asks for a code in an unexpectedly urgent way
- Your WhatsApp suddenly logs you out on your own device
What to do now
- Never share your six-digit code with anyone
- If you shared the code, immediately log in to WhatsApp on your phone — you will receive a new code and regain access
- Enable two-step verification in WhatsApp Settings
- Alert your contacts that your account may have been compromised
- Report the takeover to WhatsApp through their in-app support
Frequently asked questions
Can WhatsApp accounts be recovered after takeover?
Yes. Open WhatsApp, enter your phone number, and request a new code. WhatsApp will verify your phone number and restore your account, logging out the attacker.
What is two-step verification on WhatsApp?
Two-step verification adds a six-digit PIN that must be entered when registering your number on a new device, in addition to the SMS code. This means stealing the SMS code alone is not enough.
My friend was impersonated — what should I do?
Alert your friend through another channel (phone call). Do not send money or click any links in messages from the compromised account until your friend confirms they are back in control.