Menu

How to spot WhatsApp scams

The most common WhatsApp fraud formats — the 'hi mum/dad' message, verification-code theft, and fake giveaways — and how to tell them apart from a real message.

By AlertaSpam Security Team. Published August 7, 2026

WhatsApp scams generally fall into three formats: a message impersonating a family member from an unknown number, a request for the 6-digit verification code that arrives by SMS, or a link to a fake giveaway shared through a group or broadcast.

Warning signs

  • A message starting with 'Hi Mum/Dad, I lost my phone, this is my new number' followed shortly by an urgent request for money.
  • Anyone — including someone claiming to be WhatsApp support or a contact — asking you to forward a verification code you just received by SMS.
  • A giveaway or prize link shared in a group, especially one impersonating a well-known brand.
  • Pressure to act within minutes, or to keep the conversation only on WhatsApp and not call the number directly.

Step-by-step

  1. If a 'new number' message asks for money, stop and call the family member on their known number before doing anything else.
  2. Never share a verification code with anyone, for any reason — WhatsApp itself never asks for it, and anyone who does is trying to take over an account (possibly yours or a contact's).
  3. If your own account gets logged out unexpectedly and you didn't request it, someone may have your verification code — reinstall WhatsApp and re-verify your own number immediately.
  4. Don't click links in unsolicited giveaway messages, even from a group with people you know — a compromised contact's account can forward the same link.

What not to do

  • Don't send money based on a text conversation alone, no matter how convincing the tone — always verify by voice call first.
  • Don't forward a verification code, even to someone who claims to need it to 'help' you.
  • Don't assume a link is safe just because a real contact's name sent it — check it first.

Frequently asked questions

Can my WhatsApp account really be taken over just from a code?

Yes — the 6-digit code is all that's needed to register your number on a new device, which locks you out and gives the attacker access to your contacts and chat history going forward.

Is it safe to reply and ask questions before sending money?

It's safer than sending money outright, but a scripted scam can have convincing answers ready. A phone call to a number you already have saved is the one step that's hard for a scammer to fake.