Nobody breaks into your WhatsApp. You hand over the key yourself, usually to someone who sounds friendly, urgent or both. Here is exactly how it works and how to make it fail.
How the trick works
A message arrives, often from a contact whose account was already taken over: "Please I sent my code to your number by mistake, can you send it back?" In reality, the scammer is trying to register your phone number on their own phone. WhatsApp texts you a six-digit code to confirm. If you share it, they take over your account.
Next, they message your contacts and groups pretending to be you, asking for money, airtime or "urgent help". Each victim feeds the next round.
The 30-second fix
Open WhatsApp, go to Settings, Account, Two-step verification, and turn it on. Choose a six-digit PIN and add a recovery email. From now on, even someone holding the SMS code cannot register your number without that PIN.
Other quick checks
- Open Linked devices and log out any device you do not recognise.
- Never save the recovery email only on the same phone that could be lost.
- Warn family members, especially parents, because they are targeted often.
If it already happened
Install WhatsApp again and register your number. You will receive a fresh code, and that logs the scammer out. Then tell your contacts and groups right away that messages from you may have been fake.
Smartphone and Online Safety Skills: Use your phone with confidence and spot a scam before it spots you.
See the course