🔢 WhatsApp Code Scam — The 6-Digit Trick Explained

Sunday, 02 August 2026

The WhatsApp code scam is one of the fastest account-takeover tricks in the UK. A friend or family member's account messages you asking for a 6-digit code — and the moment you send it, your WhatsApp account is hijacked and used to scam everyone you know.

Here's exactly how it works, how to get your account back, and how to stop it spreading.

How the scam works

  1. A hacked account messages you. Someone you know has already been hacked. Their account sends you: "I accidentally sent you a 6-digit code — can you send it back?" or "I need you to verify my new phone."
  2. The code is real — and it's yours. The scammer is trying to register WhatsApp on their device using your number. The 6-digit code WhatsApp texts you is the verification code for your account.
  3. You send the code. The scammer enters it on their device — and your WhatsApp account moves to their phone.
  4. They take over. They now control your account, lock you out, and message your contacts asking them for codes or money.

⚠️ The golden rule: never share a WhatsApp verification code with anyone — ever. WhatsApp will never ask you for it, and neither will real friends. The code is the key to your account, full stop.

The messages to watch for

  • "I've sent you a code by accident, can you send it back?"
  • "I need a code to verify my account — can you help?"
  • "My phone is broken, they sent a code to your number by mistake"
  • "Can you forward this code to me? It's urgent"
  • Any message asking for the 6-digit code that arrives by SMS

If someone asks for a code, they are either hacked or a scammer — call them on their real number to check.

What to do if you've sent the code

Act fast — within minutes you can save the account:

  1. Immediately re-register your number on WhatsApp:
    • Open WhatsApp → enter your number → when asked for the 6-digit code, don't enter the one the scammer used — instead tap "Didn't receive the code?" → "Resend" (this forces a new code and can log them out)
    • Or tap "Log out of all devices" if you still have access
  2. Turn on two-step verification — Settings → Account → Two-step verification → set a PIN. This blocks the scammer from re-adding the account
  3. Check your linked devices — Settings → Linked devices → remove anything you don't recognise
  4. Warn your contacts immediately — post a status and message your close contacts: "My WhatsApp was hacked — don't send codes or money to anyone claiming to be me."

If the scammer already took over

  1. Use the "register" flow to reclaim your number — you'll get a new SMS code; if they have 2FA enabled on your account, you'll need to wait 7 days (WhatsApp's account recovery) or contact WhatsApp support
  2. Email WhatsApp support — [email protected] explaining your account was stolen
  3. Report the account — WhatsApp has an in-app report option
  4. Tell your contacts NOW — before the scammer scams them
  5. Report to Action Fraud if money was lost — 0300 123 2040 or actionfraud.police.uk

Why the scam spreads so fast

Each takeover becomes a new launching pad: the scammer messages everyone in the victim's contact list asking for codes or "emergency" money. One hacked account can hit hundreds of people within hours. That's why warning your contacts immediately is as important as recovering the account.

How to protect yourself

  • ✅ Never share any verification code — WhatsApp, banks, email: codes are for you only
  • ✅ Turn on two-step verification in WhatsApp (Settings → Account) — a PIN that blocks hijackers
  • ✅ Set a recovery email in WhatsApp settings
  • ✅ Review linked devices regularly
  • ✅ Ask before helping — if anyone asks for a code, call them on their real number
  • ❌ Never send codes "to help a friend"
  • ❌ Never "forward" a code someone says they sent by accident

Related scams

CyberAware UK — helping families report crime, recover from scams, and stay safe online.