WhatsApp scams: how to spot the fake friend, code and job messages

Quick answer

A WhatsApp message from a stranger, or from a "friend" on a new number, asking for money, a 6-digit code or a link click is almost always a scam. Never share a verification code, not even with family. Block and report the sender, and call the real friend on a number you already have.

All scam alerts
Comes by
Text, Social media
Pretends to be
WhatsApp
Last updated

How it works

WhatsApp scams run on trust. The scammer wants money, your WhatsApp account, or your bank and card details. Scammers pretend to be WhatsApp itself, a friend or relative, a recruiter or a stranger who texted the wrong number.

The most common scripts:

  • The verification code trick. You get a text with a 6-digit WhatsApp code you never asked for, then a message from a contact (whose account is already taken over) saying they sent it to you by mistake and asking you to forward it. The code lets them register your number on their phone. WhatsApp says never to share your registration code, not even with friends or family.
  • The "new number" or emergency message. Someone claiming to be a child, parent or friend says they lost their phone and need money sent to a different account right away. The FTC warns that a message that looks like it comes from a friend may not: their account may have been hacked, so call them to check.
  • Job and task offers. An unprompted message offers easy money for liking posts or doing online tasks, then asks you to pay in to unlock earnings.
  • Investment tips and romance. A stranger or a group chat pushes a "sure thing" investment, often crypto. The FTC says unexpected social media messages about investing are almost always scams.
  • Fake WhatsApp or prize messages. A message says you won something or that your account will be closed, with a link that imitates a real site. WhatsApp notes that scammers use lookalike characters in links.

After payment they push for more, or disappear.

Red flags

  • A 6-digit WhatsApp code you didn't request, followed by a message asking you to send it on
  • A friend or relative on a new number asking for money, with an excuse not to call
  • A message from a stranger that starts with a wrong-number opening and turns friendly
  • An offer of easy money for simple tasks, or a payment needed before you can withdraw earnings
  • Pressure to act fast, and a request to pay by gift card, crypto, wire or a payment app
  • A link that looks almost like a real site, or a request to move the chat to another app

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
Hi mum, this is my new number, my old phone broke. Can you save it? I need to pay a bill today and my banking app is locked. Could you send [amount] to this account for me? I'll pay you back tonight. [link]

What to do

  1. 1

    Don't reply, and don't forward any code

    Never pass on a 6-digit WhatsApp code or your two-step verification PIN. Block the sender and report the chat in WhatsApp by long-pressing a message.

  2. 2

    Check a "friend" on a number you already have

    Call the person on the number saved in your phone, or ask another family member. Don't use any number the message gives you.

  3. 3

    If you shared a code, lock the account

    Re-register your number in WhatsApp to get the account back, then turn on two-step verification. WhatsApp has a guide called How to recover a compromised account. Warn your contacts that messages from you may be fake.

  4. 4

    If you paid, call your bank or payment provider now

    Say it was fraud and ask them to stop or reverse the payment. Use the number on your card or in your bank's official app. For crypto, note the wallet address and transaction ID.

  5. 5

    If you clicked a link or gave card details

    Change passwords for the accounts involved, turn on two-step verification and watch your statements. A credit freeze is worth considering if you shared ID details.

  6. 6

    Keep screenshots

    Save the chat, phone number and any payment receipts before you block, so you have them for your reports.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers rarely pick a WhatsApp number at random. Phone numbers, names and family links are easy to find on people-search sites and in breached databases, which lets a message sound like it knows you. Serus finds where your phone number and other details are listed and removes them, and alerts you when your data shows up in a breach, so fewer scammers can reach you with a convincing story. Our guide on what data brokers know about you explains where that data comes from.

Common WhatsApp scams

Frequently asked

Is WhatsApp itself a scam?

No. WhatsApp is a real messaging service, and scammers pretend to be WhatsApp or its users. WhatsApp says it removes most spam and scam accounts automatically, but some messages still get through, so treat unexpected requests with care.

Why did I get a WhatsApp code I didn't ask for?

Someone may be trying to register your number on their device. Don't share the code with anyone. Turning on two-step verification adds a PIN they would also need.

A friend messaged asking for money. How do I know it's really them?

Call them on a number you already have. The FTC notes that a message from a friend's account can be sent by someone who hacked it.

What if I already sent money?

Contact your bank or payment provider straight away, then report it at ReportFraud.ftc.gov and ic3.gov. Speed gives the best chance of stopping a transfer.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.