Why Has My WhatsApp Been Hacked? The 6-Digit Code Scam
You are looking at your phone when a WhatsApp message pops up from a good friend or a family member. They say they are having trouble with their phone and ask, "Hey, I accidentally sent a 6-digit SMS code to your number. Can you read it back to me so I can log in?" You want to be helpful, and since it is your friend asking, you text them the code that just arrived on your phone.
A few seconds later, your WhatsApp closes. You are locked out of your own account. Panic sets in. First, take a deep breath. You have just fallen for the WhatsApp takeover scam. The person messaging you was not your friend; their account was already hacked by a scammer, and now the scammer has stolen yours.
How the WhatsApp Takeover Trick Works
When you install WhatsApp on a new phone, the app sends a 6-digit security code to your mobile number via standard text message to verify you are the true owner. Scammers know this.
The scammer installs WhatsApp on their own device and types in *your* phone number. The real WhatsApp system sends the 6-digit security code to your phone. Because the scammer needs that code to break into your account, they impersonate your friend to trick you into handing it over. Once you send them the code, they log in, locking you out.
Once inside your account, they will message all your contacts, often sending whatsapp crypto scam messages asking your friends for emergency money or pitching fake investments, pretending to be you.
3 Ways to Protect Your WhatsApp Account
You can stop this scam dead in its tracks by following these three rules:
1. Never Share Security Codes
Never, under any circumstances, share a 6-digit verification code sent to your phone with anyone else. Not your spouse, not your best friend, and certainly not an online "help desk." That code is the key to your account.
2. Call Your Friend to Verify
If a friend messages you asking for money, a code, or anything unusual, do not reply on WhatsApp. Call them directly on their actual mobile number. You will usually find out they have no idea what you are talking about.
3. Turn on Two-Step Verification
Open WhatsApp, go to Settings > Account > Two-Step Verification. This allows you to create a custom PIN number. Even if a scammer tricks you into giving them the SMS code, they will still be blocked because they do not know your secret PIN.
What to Do If You Are Locked Out
If you are currently locked out, do not panic. Simply delete the WhatsApp app from your phone and re-download it. Open it, type your phone number in, and request a new 6-digit SMS code. When you enter the new code, it will log you back in and automatically kick the scammer out. Then, immediately turn on Two-Step Verification.
The Golden Rule
Your 6-digit verification codes are for your eyes only. If anyone asks you to forward a code to them, they are a scammer trying to steal your account. Ignore the message and secure your app.