WhatsApp scams
Last updated September 18, 2026
The short answer
WhatsApp scams involve verification code theft to hijack your account, impersonation of friends or family asking for money, and phishing links sent through messages. WhatsApp will never contact you through the app to ask for your verification code. Never share your 6-digit WhatsApp code with anyone.
With over 3 billion users worldwide, WhatsApp is a massive target for scammers. The most dangerous scam is account hijacking through verification code theft. Once a scammer controls your account, they can message all your contacts pretending to be you. WhatsApp's end-to-end encryption, while great for privacy, means scam messages can't be detected by automated systems.
How WhatsApp scams work
- 1
Verification code theft
A scammer enters your phone number to register WhatsApp on their device. WhatsApp sends a 6-digit verification code to your phone. The scammer, often posing as a friend whose account they already hijacked, messages you asking you to forward "a code sent by mistake." Once you share it, they take over your account.
- 2
Friend or family impersonation
After hijacking an account, the scammer messages contacts saying they're in an emergency and need money urgently via bank transfer. Because the message comes from the victim's real account, contacts often believe it.
- 3
Fake job or investment offers
You receive a WhatsApp message from an unknown number offering a high-paying remote job or investment opportunity. They guide you to a fake platform where you deposit money or share personal information.
- 4
"Hi Mom/Dad" scam from a new number
You get a message from an unknown number: "Hi Mom, I lost my phone. This is my new number. Can you send me money for an urgent bill?" The scammer hopes you'll wire money before verifying it's actually your child.
Warning signs
- Someone asks you to forward a verification code that was sent to your phone
- A friend or family member messages you from a new number asking for money
- A contact's account suddenly sends messages about investment opportunities or job offers
- You receive a message with a link from an unknown number claiming you won a prize
- A message creates extreme urgency, like "I need money RIGHT NOW or something terrible will happen"
- You're added to unknown group chats promoting crypto, forex, or job opportunities
Examples
Verification code forwarding scam
You get a WhatsApp message from a friend: "Hey, I accidentally sent a 6-digit code to your number. Can you send it to me?" You check your texts and see a WhatsApp verification code. If you forward it, the scammer registers your WhatsApp number on their device and you lose access to your account.
"Hi Mom, I need help" from a new number
A parent receives a text from an unknown number: "Hi Mom, my phone broke. This is my new number. I need to pay a bill urgently. Can you transfer $800 to this account?" The parent sends the money without calling their child's old number to verify.
What to do
- Never share your WhatsApp verification code with anyone, for any reason.
- If someone claims to be a friend or family member from a new number, call their old number to verify before sending money.
- Enable two-step verification in WhatsApp Settings > Account > Two-Step Verification.
- If your account was hijacked, re-register WhatsApp with your phone number. Entering the verification code will log out the scammer.
- Report and block suspicious accounts by tapping the contact's name and selecting "Report."
Report it to WhatsApp
Report and block the contact from inside the chat, and turn on two-step verification so your number cannot be re-registered.
Getting your money back
If your WhatsApp account is hijacked, register again with your phone number immediately. The 6-digit SMS code will be sent to you, and entering it will log the scammer out. If they enabled two-step verification, you'll need to wait 7 days before you can verify without their PIN. Notify your contacts immediately that your account was compromised.
Frequently asked questions
How do I get my hijacked WhatsApp account back?
Open WhatsApp and sign in with your phone number. You'll receive a 6-digit code via SMS. Entering it logs out the scammer. If they set up two-step verification, you'll have to wait 7 days. Notify your contacts immediately so they don't fall for scam messages sent from your account.
Can WhatsApp messages contain viruses?
WhatsApp messages themselves don't carry viruses, but links in messages can lead to malicious websites or prompt you to download malware. Never click links from unknown senders, and be cautious even with links from contacts whose accounts may have been compromised.
What is WhatsApp two-step verification?
Two-step verification adds a 6-digit PIN that you create, which is required whenever you register your phone number with WhatsApp again. This prevents scammers from taking over your account even if they obtain your SMS verification code. Enable it in Settings > Account > Two-Step Verification.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about WhatsApp, these are the guides worth reading next.