🔢 Someone Asked for Your WhatsApp Code? Do This Now

The WhatsApp code scam — the 6-digit trick explained, and exactly what to do next.

Sunday, 02 August 2026

If someone has just messaged you asking for a 6-digit code, stop and read this before you reply. That request is the WhatsApp code scam — one of the fastest account-takeover tricks in the UK — and the code they want is the key to your WhatsApp account, not theirs.

Here's exactly what the request means, what the code really is, what to do in the next five minutes, how to get your account back if you already sent it, and how to stop it spreading to everyone you know.

⚡ Quick answer: Never share a WhatsApp verification code with anyone. If you already sent one, re-register your number on your own phone now, turn on two-step verification, and warn your contacts straight away.

🚨 Someone is asking you for a code right now?

  • Don't send it. No friend, family member, bank or company ever needs your WhatsApp code — and neither does WhatsApp itself.
  • The person asking is probably hacked. The message can come from a real account that a criminal now controls.
  • Already sent it? Re-register your number on your own phone immediately (steps below) and switch on two-step verification.
  • Warn your contacts now — the next messages go to them, pretending to be you.

What the code actually is

Each WhatsApp account is tied to a phone number. When you set WhatsApp up on a new phone, WhatsApp texts a 6-digit verification code to that number to prove the phone belongs to you. Type the code in, and the number is registered on that device.

That's the whole point of the scam: a criminal has your phone number and is trying to register WhatsApp on their own phone using it. WhatsApp has just sent the code to you — so you are the only thing standing between them and your account.

The scammer cannot receive your text messages. That is why they need you to hand the code over yourself.

⚠️ The golden rule: never share a WhatsApp verification code with anyone — ever. WhatsApp will never ask you for it, and neither will real friends. The code is the key to your account, full stop.

How the scam works

  1. A hacked account messages you. Someone you know has already been hacked. Their account sends you: "I accidentally sent you a 6-digit code — can you send it back?" or "I need you to verify my new phone."
  2. The code is real — and it's yours. The scammer is trying to register WhatsApp on their device using your number. The 6-digit code WhatsApp texts you is the verification code for your account.
  3. You send the code. The scammer enters it on their device — and your WhatsApp account moves to their phone.
  4. They take over. They now control your account, lock you out, and message your contacts asking them for codes or money.

That's why the request always looks so believable: it arrives from a name you trust. The account is real — the person behind it is not.

The messages to watch for

  • "I've sent you a code by accident, can you send it back?"
  • "I need a code to verify my account — can you help?"
  • "My phone is broken, they sent a code to your number by mistake"
  • "Can you forward this code to me? It's urgent"
  • "It's only a 6-digit number, it isn't important" — a line designed to make you drop your guard
  • "Just send me a screenshot of the text" — a screenshot is the same as forwarding it
  • Any message asking for the 6-digit code that arrives by SMS

If someone asks for a code, they are either hacked or a scammer — call them on their real number to check.

What the code is not

It helps to be clear about what you are being asked for:

  • It is not a code that unlocks someone else's account
  • It is not something a friend needs "just this once" while they're locked out
  • It is not something WhatsApp support, your bank, or any company will ever ask you to read out
  • It is not harmless — it is the last step of a full account takeover

What to do if you've sent the code ⏱️

Act fast — within minutes you can save the account:

  1. Immediately re-register your number on WhatsApp:
    • Open WhatsApp → enter your number → when asked for the 6-digit code, don't enter the one the scammer used — instead tap "Didn't receive the code?" → "Resend" (this forces a new code and can log them out)
    • Or tap "Log out of all devices" if you still have access
  2. Turn on two-step verification — Settings → Account → Two-step verification → set a PIN. This blocks the scammer from re-adding the account
  3. Check your linked devices — Settings → Linked devices → remove anything you don't recognise
  4. Warn your contacts immediately — post a status and message your close contacts: "My WhatsApp was hacked — don't send codes or money to anyone claiming to be me."

If the scammer already took over

  1. Use the "register" flow to reclaim your number — you'll get a new SMS code; if they have 2FA enabled on your account, you'll need to wait 7 days (WhatsApp's account recovery) or contact WhatsApp support
  2. Email WhatsApp support — [email protected] explaining your account was stolen
  3. Report the account — WhatsApp has an in-app report option
  4. Tell your contacts NOW — before the scammer scams them
  5. Report to Action Fraud if money was lost — 0300 123 2040 or actionfraud.police.uk

How to stop the spread to your contacts

A hijacked account is a weapon aimed at everyone in your phone book. The contacts most at risk are the ones who trust you most — family, close friends, and older relatives. Warn them before the scammer reaches them.

Copy, edit and send this to your contacts:

"My WhatsApp was hacked today. If you get a message from my number asking for a code or money, it isn't me — please don't send anything. Call me on my usual number if you're unsure."

Then:

  • Post a WhatsApp status with the same warning — it reaches everyone who has your number
  • Tell the people most likely to pay — parents, grandparents, anyone who might send money without checking
  • Include the rule in the warning — no codes, no money, and always verify by calling a saved number
  • Ask them to pass it on if they get a request from your name

How to report it in the UK

Why the scam spreads so fast

Each takeover becomes a new launching pad: the scammer messages everyone in the victim's contact list asking for codes or "emergency" money. One hacked account can hit hundreds of people within hours. That's why warning your contacts immediately is as important as recovering the account.

How to protect yourself

  • ✅ Never share any verification code — WhatsApp, banks, email: codes are for you only
  • ✅ Turn on two-step verification in WhatsApp (Settings → Account) — a PIN that blocks hijackers
  • ✅ Set a recovery email in WhatsApp settings
  • ✅ Review linked devices regularly
  • ✅ Ask before helping — if anyone asks for a code, call them on their real number
  • ✅ Treat "just a code" requests as an attack, whoever they appear to come from
  • ❌ Never send codes "to help a friend"
  • ❌ Never "forward" a code someone says they sent by accident

Common questions

"Someone asked me for a code but I didn't send it — am I safe?" Yes. As long as you didn't share it, your account stays with you. Switch on two-step verification anyway, because it means your number is on a scammer's list and they may try again.

"Can WhatsApp support ever ask me for my code?" No. Neither can your bank, the police, or any company. Any request for the code is a scam.

"The message came from my friend's real account — how?" Because their account has already been taken over. They are a victim too — message them on another channel and tell them.

"Is a WhatsApp code the same as a bank one-time passcode?" No. They are separate codes and both are dangerous to share. See spot the fake bank-call scam before you share codes.

"Why do I keep getting codes I didn't ask for?" Someone is repeatedly trying to register your number. Don't share the code with anyone, and turn on two-step verification so the codes alone can't be used.

Related scams

CyberAware UK — helping families report crime, recover from scams, and stay safe online.