01A typical message
Example for illustration; real messages vary.
02Warning signs
- Someone, often a friend’s hacked account, asks for a 6-digit code you just received by SMS.
- You receive a WhatsApp registration code you did not request.
- Pressure and a believable story: “by mistake”, “urgent”, “just this once”.
03What to do
- Never share a WhatsApp code with anyone, even a friend. WhatsApp itself never asks for it in a chat.
- Turn on two-step verification: WhatsApp › Settings › Account › Two-step verification, and set a PIN.
- If a friend’s account asks for money or codes, call them by phone before doing anything.
04Already clicked or replied?
- Stop: do not enter anything else on that page and close it.
- If you typed a password, change it now on the real site or app, and turn on two-step verification.
- If you entered card details or approved a payment, call your bank on the number on your card and block the card.
- If you installed an app from a link, delete it and scan your phone with a trusted security app.
- Report it: forward scam SMS and links to your operator, and to your bank if it used their name.