Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
A message from a contact — or someone claiming to be one — asking you to forward a code you just received “by mistake.” That code is your own WhatsApp verification code, and forwarding it hands your account straight to the person asking for it. Here’s exactly how this scam works and what to do if you’ve already fallen for it.
The scam works because the message often appears to come from a real contact’s number — one that has itself already been compromised in the same way, creating a chain — or because “WhatsApp support” sounds official enough to lower your guard. Critically, the code genuinely was sent to your phone by WhatsApp itself, which makes the request feel more legitimate than a typical phishing attempt.
Reinstall WhatsApp and attempt to log in with your number right away — if you can receive a new verification SMS, this often ends the fraudster’s session since only one device can be active at a time.
If a two-step verification PIN was also set by the fraudster, email support@whatsapp.com including the phrase “Lost/Stolen: Please deactivate my account” and your phone number in full international format — this is WhatsApp’s own documented recovery request for this situation.
Call or SMS close contacts to let them know your WhatsApp may be compromised and not to trust requests for money, personal information, or forwarded codes appearing to come from you.
File at cybercrime.gov.in or call 1930 if the compromised account was used to defraud any of your contacts.
Set a new two-step verification PIN you haven’t used elsewhere — this is the single strongest protection against this exact scam repeating.
The single rule that stops this entire scam: never forward any verification code to anyone, for any reason, regardless of who is asking or how urgent or innocent the request sounds — a genuine WhatsApp verification code exists only to log you into your own account, and any request to share it with someone else is, without exception, an attempt to take it over.
| Claimed Situation | Reality |
|---|---|
| 'I accidentally sent my code to your number, please forward it' | This is never how WhatsApp verification actually works — the code was sent to YOU because someone requested a login for YOUR number |
| A message claiming to be 'WhatsApp support' asking for your code | WhatsApp never contacts users to request their verification code — this is always a scam |
| A known contact's number asking you to forward a code | Their account is likely already compromised and being used to target their contact list, including you |
No. WhatsApp’s official recovery process and reporting on cybercrime.gov.in are both free.
Yes — account recovery is entirely self-service. A lawyer becomes relevant only if the compromised account was used to defraud your contacts and legal action becomes necessary.
Need professional legal help with this?
Find a Lawyer on VidyodayFor the broader account-recovery process this scam leads to, see our guide on WhatsApp account hacked. If instead someone created a separate fake account rather than taking over your real one, see our guide on WhatsApp impersonation.
Because someone else requested a login for your phone number — WhatsApp sends the code to your number regardless of who initiated the login attempt.
No — there is no genuine scenario where forwarding your own verification code to someone else is necessary or safe.
Their account has very likely been compromised through this same scam and is now being used to target their own contact list — treat the request with the same caution regardless of who it appears to come from.
Often yes, especially if you act quickly — try logging back in immediately, and use WhatsApp’s official “Lost/Stolen” recovery email if that doesn’t work.
Not automatically — your chat history typically remains intact once you regain access, unless the intruder specifically deleted it during their access.
It’s an additional PIN required beyond the verification code — enabling it means even a shared code alone isn’t enough for someone to take over your account.
Yes, if possible — they may not realize their own account has been compromised and is being used to scam their contacts.
This article is for general information only and does not constitute legal advice. WhatsApp’s recovery process and features can change — verify current guidance on WhatsApp’s official Help Center before relying on this for a real situation.
