WhatsApp update scams: how fake updates and verification code requests work
Quick answer
A message telling you to "update WhatsApp" through a link, or to share a code to keep your account, is a scam. WhatsApp says to use only the official app, and no real service asks for your verification code. Don't tap the link, never share the code, and report it.
- Comes by
- Text, Social media, Website
- Pretends to be
- Last updated
How it works
Scammers pretend to be WhatsApp, or a contact whose account they have taken over, and send a message saying your app is out of date, your account will be closed, or a new version is available.
The message points you to a link. Depending on the version, the link leads to a fake download of the app or to a page that asks for your phone number or login details. WhatsApp warns that fake versions of the app put your account and data at risk, and tells people to use only the official WhatsApp.
A second version aims at your account instead. The scammer triggers a verification code to be sent to your phone, then contacts you and asks you to read it back, often saying it was sent by mistake or is needed for the "update". The FTC explains that a verification code works like a second lock on your account, and that anyone who asks you for one is a scammer. With the code, they can take over your account and message your contacts while pretending to be you.
Red flags
- A message saying you must update, pay or verify to keep using WhatsApp
- A link that downloads an app or opens a page asking for your number or login
- A request to read back or forward a verification code
- A message from a friend that suddenly pushes a link or asks for a code
- Pressure to act within hours or lose your account
Example message
Your WhatsApp is out of date and will stop working today. Update now to keep your chats: [link]. If you get a code by text, reply with it so we can confirm it's you.
What to do
- 1
Don't tap the link or reply with a code
Delete the message. Update apps only from your phone's official app store, and never share a verification code with anyone.
- 2
Turn on two-step verification
WhatsApp recommends setting up two-step verification with a secret PIN you never share. It makes a stolen code much less useful.
- 3
If you shared a code, secure your account
Re-register your phone number in WhatsApp to get your account back, then set up two-step verification. Tell your contacts not to trust messages from you sent while you were locked out.
- 4
If you installed something from a link
Uninstall it, run your phone's security scan and change passwords for accounts you use on that phone. If you entered a password anywhere, change it there first.
- 5
Block and report
Report the message or contact inside WhatsApp, then report it to the FTC.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers need your phone number to send this kind of message. Numbers are easy to buy from data brokers and people-search sites, and they show up in data breaches. Serus finds where your number is listed and removes it, and alerts you when your details appear in a breach, so fewer scammers can reach you.
More WhatsApp scams
Frequently asked
Does WhatsApp ask me to update through a link in a message?
WhatsApp's advice is to always use the official WhatsApp app, and warns that fake versions put your account and data at risk. Get updates from your phone's official app store, not from a message.
Why would anyone want my verification code?
The FTC says a verification code is the second key to your account. With your password or phone number plus the code, a scammer can log in as you. Only scammers ask you for it.
My friend sent me an update link. Is it safe?
Not necessarily. Scammers who take over an account message its contacts. Check with your friend by another channel, such as a phone call, before you tap anything.
What if I already tapped the link?
Don't enter details on the page it opened. If you installed anything, uninstall it, change the passwords you may have exposed and set up two-step verification on WhatsApp.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
