WhatsApp Account Takeover 'Send Me the Code' Scam Examples
A message arrives from a friend or family member's actual WhatsApp account, which has already been hijacked, asking you to forward the 6-digit verification code WhatsApp just texted to your phone, often with an excuse about needing it to confirm something. That code is actually the login code for your own WhatsApp account, and sharing it hands the scammer complete control, locking you out and letting them message all your contacts using your identity to continue the chain. The trust of a familiar contact is the lever, not a stranger. Never share a verification code with anyone, even someone you know well.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Hey! Sorry to bother you — WhatsApp just sent me a code to your number by mistake. Can you forward it to me?
Hi it's me. I'm trying to log in to my account and the verification code went to you. Please send it over quickly, it expires soon.
I'm having trouble with WhatsApp. A 6-digit code will appear on your screen. Could you send it to me? It's urgent.
My account is locked and I need that SMS code. You're the only one I can ask right now. Please help!
What the scammer wants
To gain full access to your WhatsApp account, lock you out, and then use your account to send the same message to all your contacts, perpetuating the chain of account takeovers.
Red flags in the message
- Any contact asking you to share a code sent to your phone
- Unusual urgency or an appeal to friendship to override caution
- Explanation that 'it was sent to you by mistake' — WhatsApp codes go to the registered number only
- Request arrives unexpectedly, with no prior conversation
- Something feels slightly 'off' about the message style
A safe response
Never share a WhatsApp code with anyone — not even someone who appears to be a close contact. WhatsApp codes are personal one-time passwords. Contact the person by another method to check if they really sent the message.
What not to send
- WhatsApp 6-digit verification code
- Any other OTP codes
- Account details or passwords
What to do if you already replied
- Re-register your WhatsApp number immediately (WhatsApp will send a new code to your SIM)
- Enable two-step verification in WhatsApp settings
- Warn your contacts that your account may have been used to send scam messages
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times
Frequently asked questions
The message came from my actual friend's account and phone number — isn't that proof it's them?
No, the account itself has likely already been taken over by a scammer using the exact same trick, so messages from a real contact's account don't guarantee that contact is sending them. If a request for a code feels off, confirm with your friend through a different channel, like a phone call.
I already sent the code — is my WhatsApp account gone?
Try to regain access immediately by opening WhatsApp and requesting a new verification code sent to your phone, which can often lock the scammer back out if you act quickly. If already locked out, use WhatsApp's official in-app support to report the takeover and begin recovery.
What will they do with my account once they have it?
They will typically use your account to send the same send-me-the-code message to your contacts, continuing the chain, and may also ask your contacts for money while pretending to be you. This is why acting fast to recover the account matters.
How can I protect my WhatsApp account from this happening again?
Turn on two-step verification in WhatsApp's settings, which adds a PIN requirement beyond the SMS code and makes account takeover much harder even if a code is somehow shared. Also make it a firm rule with friends and family to never share verification codes.