WhatsApp account takeover (verification code): cómo funciona, señales y qué hacer

Identity theft · médio

The scammer tries to register the victim's WhatsApp on another device. WhatsApp sends a verification code by SMS to the number's owner.

To get that code, the criminal poses as a survey company, a buyer from an online ad, a courier, a clinic or a loyalty program and says: "I'll send you a code, read it back to confirm".

With the code, they take over the account and message contacts asking for urgent transfers. If two-step verification isn't on, they can also set their own PIN and make recovery harder.

Sinais / Signs

Someone asks for the 6-digit code you received by text.
You get a verification code you didn't request.
Contacts say you've been asking them for money.
WhatsApp suddenly logs out on your phone.

Prevenção / Prevention

Never share verification codes with anyone.
Turn on two-step verification (PIN) and add a recovery email.
Enable passkeys or biometrics when available.
Regularly review linked devices.
Avoid publishing your phone number in public listings.

O que fazer / What to do

Reinstall WhatsApp and re-register your number to get a new code and kick the intruder out.
Contact WhatsApp support through the app or official email to report the stolen account.
Warn contacts through another channel (social media, calls) not to send money.
File a police report (many Brazilian states accept online reports) and keep screenshots, receipts, numbers and links.
Change passwords for email, banking and social media, turn on two-step verification and sign out of other devices.

FAQ

I gave away my WhatsApp code. Now what?

Reinstall the app and re-verify your number immediately. If the intruder set a PIN, wait out the app's lockout period, warn contacts and contact support.

Can my WhatsApp be taken over without me sharing a code?

It's less common, but can happen via SIM swap or WhatsApp Web access. Check linked devices and contact your carrier.

Radar

2025-11-01 — La estafa de la falsa venta se dispara 314% y lidera los reportes de clientes bancarios. En el 1S 2025 hubo 174.000 reportes de falsa venta y 139.000 de falsa central (+195,7%); la estafa de WhatsApp bajó 9,9%. Fuente: Febraban (via Diario de Pernambuco)

Diario de Pernambuco — Febraban: golpes mais relatados por clientes bancários (1º sem/2025) · CERT.br — Cartilha de Segurança para Internet · ANPD — Autoridade Nacional de Proteção de Dados