WhatsApp Verification Code Scams: Stay Safe and Protect Your Account - Cyber and Fraud Centre

WhatsApp, the popular messaging service owned by Meta, has become a prime target for fraudsters. A recent scam involves the manipulation of the WhatsApp’s verification code system, leading to unsuspecting users losing control of their accounts.

How the Scam Works

The Trigger: Scammers initiate the attack by entering your phone number into WhatsApp, generating an authentic verification code that will be sent to your device by text message.
The Fake Friend: Shortly after you receive the code, a scammer will contact you via WhatsApp, posing as a trusted friend or family member. They’ll use a believable story – like accidentally entering your number by mistake – to convince you to share the verification code.
Account Takeover: Once you share the code, the scammer gains full access to your WhatsApp account. They can lock you out and proceed with the next stage of their plan.

What Happens Next

With control of your account, scammers have various tactics at their disposal:

Targeting Your Contacts: They’ll message your closest contacts, posing as you, to request money or sensitive information.
Data Theft: Scammers will rifle through your message history to gather personal details that could be used to defraud you further or access other online accounts.
Spreading the Scam: The cycle continues as they attempt to trick more victims into sharing verification codes.

How to Protect Yourself

Never Share Codes: Treat your WhatsApp verification code like a secure password. WhatsApp will never ask you for it directly, and neither should anyone else.
Enable Two-Step Verification: This adds a layer of security by requiring a PIN in addition to the verification code when logging into your account. Enable it in your WhatsApp settings (Account > Two-step verification).
Be Sceptical of Urgent Requests: Even if a message seems to come from a familiar contact, treat requests for money or personal/private information with suspicion. Verify their identity with a phone call or another means of contact.
Report and Block: Report suspicious messages or accounts within WhatsApp by pressing and holding the message bubble, selecting “Report,” and following the instructions.