WhatsApp 6-Digit Code Scam: New Account Takeover Trick Spreading Globally
A new WhatsApp scam is spreading where fraudsters impersonate trusted contacts and request a 6-digit security code, claiming it was sent by mistake. If shared, this code can be used to hijack the victim's WhatsApp account.
How the Scam Works
This WhatsApp scam follows a deceptive pattern:
-
Impersonation of a known contact: A message arrives from a friend or acquaintance you haven't heard from in a while, opening with casual conversation like "How are you?"
-
Request for a security code: The scammer claims they "accidentally sent a code" and asks you to share a 6-digit number that appears on your phone
-
Account takeover: The 6-digit code is an authentication code sent by WhatsApp's official system. When shared with the fraudster, they can register your phone number on another device and gain complete control of your WhatsApp account
Warning Signs to Recognize
- An unexpected message from a known contact followed quickly by code requests
- Explanations like "I sent this by mistake" or "wrong number"
- Pressure to "send back" or "return" a code
- Communication style inconsistent with how the person normally talks to you
Prevention Tips
Never do this:
- Never share your 6-digit security code from WhatsApp with anyone
- Do not send codes even if someone claims it's for "verification" or "testing"
Always verify:
- If someone requests a code, contact them directly through another method (phone call, SMS) to confirm
- When in doubt, contact WhatsApp's official support
Where to Report
If you suspect fraud or receive suspicious messages:
- WhatsApp Support: Access "Help & Support" within the app
- Local law enforcement: Report cybercrime to your country's police
- Consumer protection agencies: File complaints about fraud
- WhatsApp Security Team: Report the fraudulent account
If You've Already Shared a Code
- Immediately log back into your WhatsApp account
- Change related passwords and account security settings
- Verify your device for unauthorized access
- Report to WhatsApp and local authorities immediately
Source: Il Fatto Quotidiano