[{"data":1,"prerenderedAt":265},["ShallowReactive",2],{"switcher-blog-pareja":3,"art-whatsapp-account-theft-six-digit-code-en":6},{"en":4,"es":5},"\u002Fen\u002Fblog\u002Fwhatsapp-account-theft-six-digit-code\u002F","\u002Fes\u002Fblog\u002Frobo-cuentas-whatsapp-codigo-seis-digitos\u002F",{"id":7,"title":8,"author":9,"body":10,"date":249,"description":250,"extension":251,"image":252,"meta":253,"navigation":254,"pareja":255,"path":256,"seo":257,"sin_cta":258,"stem":259,"tags":260,"__hash__":264},"blogEn\u002Fen\u002Fblog\u002Fwhatsapp-account-theft-six-digit-code.md","If a friend asks you for the six-digit WhatsApp code you just received, that's not your friend","Paco Cubel",{"type":11,"value":12,"toc":237},"minimark",[13,18,22,30,37,41,48,51,89,93,100,103,110,114,120,123,127,130,140,150,156,162,166,176,183,186,190,193,200,207,211],[14,15,17],"h2",{"id":16},"i-sent-you-a-code-by-mistake-can-you-pass-it-on","\"I sent you a code by mistake, can you pass it on?\"",[19,20,21],"p",{},"The message comes from someone you've known for years. Their photo, their name, their number. Moments earlier an SMS landed with a six-digit code you never asked for. And now your friend is messaging you for that code, apologising for the mix-up.",[19,23,24,25,29],{},"If you send it, ",[26,27,28],"strong",{},"you have just handed your WhatsApp account to a stranger",".",[19,31,32,33,36],{},"One honest note before we go on: ",[26,34,35],{},"this isn't breaking news",". It's a scam that has been running for years and keeps working precisely because nobody talks about it until it happens to someone close. We're writing it as a guide, not as a news story.",[14,38,40],{"id":39},"whats-really-going-on","What's really going on",[19,42,43,44,47],{},"That six-digit code is ",[26,45,46],{},"the key to your account",". It's what WhatsApp texts you when someone tries to install your number on a phone. That's all it takes: your number and the code.",[19,49,50],{},"The full sequence goes like this:",[52,53,54,62,69,76,82],"ol",{},[55,56,57,58,61],"li",{},"The scammer enters ",[26,59,60],{},"your number"," into a freshly installed WhatsApp on their own phone.",[55,63,64,65,68],{},"WhatsApp texts the code to ",[26,66,67],{},"you",", because the number is yours.",[55,70,71,72,75],{},"The scammer messages you ",[26,73,74],{},"from the account of a contact they stole earlier"," and asks for the code with a plausible excuse.",[55,77,78,79],{},"You send it. They're in. ",[26,80,81],{},"You're locked out of your own account.",[55,83,84,85,88],{},"Then the cycle restarts: from your account they message ",[26,86,87],{},"your"," contacts asking them for their codes. And while they're at it, they ask for urgent money while pretending to be you.",[14,90,92],{"id":91},"why-it-fools-even-suspicious-people","Why it fools even suspicious people",[19,94,95,96,99],{},"Because it trips none of the alarms we've all been trained to watch for. ",[26,97,98],{},"It isn't an odd number."," There's no strange link. There are no spelling mistakes. It's your brother-in-law, your colleague or your mother, writing from their real account, asking for a small and entirely believable favour.",[19,101,102],{},"The scam doesn't attack the technology. It attacks the trust you place in your own contact list.",[19,104,105,106,109],{},"And there's a second blow that gets less attention: whoever takes your account ",[26,107,108],{},"takes your conversations too",". If you use WhatsApp for work, your clients, your quotes and your suppliers are all sitting in there.",[14,111,113],{"id":112},"the-rule-in-one-sentence","The rule, in one sentence",[19,115,116,119],{},[26,117,118],{},"You never share your WhatsApp registration code with anyone. Ever. Not family, not friends, not someone claiming to be tech support."," There is no legitimate reason for another person to need that number.",[19,121,122],{},"WhatsApp says as much in its own help pages, and it doesn't come with caveats.",[14,124,126],{"id":125},"if-your-account-has-already-been-taken","If your account has already been taken",[19,128,129],{},"It's not hopeless, but you need to move fast.",[19,131,132,135,136,139],{},[26,133,134],{},"1. Register your number again."," Open WhatsApp, enter your phone number and request a new code by SMS. The moment you enter it, ",[26,137,138],{},"the intruder's session is closed automatically",": WhatsApp only allows one phone per number, so reclaiming it kicks them out.",[19,141,142,145,146,149],{},[26,143,144],{},"2. If it asks for a PIN you never set",", the thief has switched on two-step verification to lock you out. In that case you'll have to ",[26,147,148],{},"wait seven days"," before you can recover the account without that PIN. It's maddening, but it's WhatsApp's security working as intended — and the account is no use to them past that date either.",[19,151,152,155],{},[26,153,154],{},"3. Warn your contacts through another channel"," — a phone call, an SMS, social media, a group on another app. This is the most urgent of the three even though it's the least technical: while you're busy recovering the account, someone is asking your people for money in your name.",[19,157,158,161],{},[26,159,160],{},"4. Once you have it back, switch on two-step verification"," (see below).",[14,163,165],{"id":164},"the-two-minutes-that-stop-it-happening-again","The two minutes that stop it happening again",[19,167,168,169,172,173,29],{},"Turn on ",[26,170,171],{},"two-step verification",". It's a six-digit PIN you choose yourself, which WhatsApp asks for whenever your number is registered on a new phone. With it in place, even if a scammer gets hold of the SMS code, ",[26,174,175],{},"they can't get in without your PIN",[19,177,178,179,182],{},"You'll find it under ",[26,180,181],{},"Settings → Account → Two-step verification → Turn on",". It'll ask for the PIN and a recovery email address.",[19,184,185],{},"That email matters, and plenty of people skip it: it's what saves you the day you forget the PIN. Add it, and make sure it's an account you can genuinely get into.",[14,187,189],{"id":188},"and-if-you-use-whatsapp-for-your-business","And if you use WhatsApp for your business",[19,191,192],{},"Multiply everything above. Losing your personal account is a bad day; losing the business one means losing the channel your customers write to, with the entire conversation history inside it, and with someone impersonating you to your own client list.",[19,194,195,196,199],{},"It's worth ten minutes on the same thing we apply to email and to the admin panels of the sites we manage: ",[26,197,198],{},"two-step verification on everything that supports it",", and a clear picture of who has access to what. That's not paranoia — it's that recovering a stolen account costs far more time than protecting one.",[19,201,202,203,206],{},"If you're now wondering whether your company email, your website or your shop have that second barrier in place — or you don't even know where to look — ",[26,204,205],{},"we'll check it and set it up for you",". Let's talk.",[14,208,210],{"id":209},"references","References",[212,213,214,223,230],"ul",{},[55,215,216],{},[217,218,222],"a",{"href":219,"rel":220},"https:\u002F\u002Ffaq.whatsapp.com\u002F1131652977717250\u002F?locale=en_US",[221],"nofollow","WhatsApp — How to recover a compromised account (official help)",[55,224,225],{},[217,226,229],{"href":227,"rel":228},"https:\u002F\u002Fwww.incibe.es\u002Fciudadania\u002Favisos",[221],"INCIBE — Security alerts for citizens (Spanish national cybersecurity institute)",[55,231,232],{},[217,233,236],{"href":234,"rel":235},"https:\u002F\u002Fwww.xataka.com\u002Fseguridad\u002Falguien-te-pide-codigo-seis-digitos-que-te-acaba-llegar-a-whatsapp-no-se-des-engano-para-robarte-cuenta",[221],"Xataka — If someone asks you for a six-digit code, don't send it",{"title":238,"searchDepth":239,"depth":239,"links":240},"",2,[241,242,243,244,245,246,247,248],{"id":16,"depth":239,"text":17},{"id":39,"depth":239,"text":40},{"id":91,"depth":239,"text":92},{"id":112,"depth":239,"text":113},{"id":125,"depth":239,"text":126},{"id":164,"depth":239,"text":165},{"id":188,"depth":239,"text":189},{"id":209,"depth":239,"text":210},"2026-07-28","The verification code scam is still emptying WhatsApp accounts. Here's how it works, why it fools even cautious people, what to do if your account has already been taken, and the two-minute setting that stops it happening again.","md","\u002Fog\u002Fog-default.png",{},true,"robo-cuentas-whatsapp-codigo-seis-digitos","\u002Fen\u002Fblog\u002Fwhatsapp-account-theft-six-digit-code",{"title":8,"description":250},false,"en\u002Fblog\u002Fwhatsapp-account-theft-six-digit-code",[261,262,263],"Security","Scams","WhatsApp","KBH25c8qz7P9J9Bd3n4LS8ElcxyzLqb0KTOArdjuRM4",1787312492809]