Someone Asked for Your WhatsApp Code? Here's What's Really Happening
The 'can you send me the code I texted by mistake' message is one of the most common account-takeover scams. How it works and how to shut it down.
Diana ReyesNovember 6, 2026 · 7 min read
Reviewed by Victor Nunes · November 8, 2026
In this article
It usually arrives from a friend's account: 'Hey, I accidentally sent you my 6-digit code — can you forward it?' The friend is real; their account is already stolen. And if you forward that code, yours is next.
What the code actually is
That 6-digit number is WhatsApp's registration code. Whoever has it can register your number on their phone — taking over your account, your chats, and your contact list. The 'sent by mistake' story exists only to get you to hand it over.
Why it spreads so fast
Once an account is taken over, the attacker messages that person's whole contact list with the same trick. Because it comes from someone you trust, the success rate is high. That's social engineering, not hacking.
What to do right now
Never share a code you didn't request — no legitimate service needs you to read one back to another person. Turn on two-step verification (Settings → Account → Two-step verification) so a stolen code alone isn't enough. If a contact sends you this message, call them: they probably don't know they've been compromised.
If your account was already taken
Re-register your number on your own phone with a fresh code — this kicks the attacker off. Then immediately set the two-step PIN. Warn your contacts that any money requests from you in the last hours were not you.
Frequently asked questions
Can someone take my WhatsApp with just the code?
Yes. The 6-digit registration code is all that's needed to register your number on another device. Never share it, and enable two-step verification.
Does two-step verification stop this?
It adds a PIN that the attacker won't have, so a stolen SMS code alone won't let them in. It's the single most important WhatsApp setting.
Diana spent eight years on a bank's fraud-prevention team before turning to writing. She focuses on account takeover, recovery, and the scams that target everyday users.
