Increase in WhatsApp account takeovers

Increase in WhatsApp account takeovers

We are seeing a significant increase in WhatsApp accounts being taken over by criminals. This commonly occurs when individuals are tricked into sharing a one‑time passcode (OTP) sent by WhatsApp.

Once an account is compromised, offenders frequently contact the victim’s friends, family, or community groups, impersonating them and requesting money, vouchers, or personal information.

How These Scams Work

Criminals may:

Pretend to be a friend, family member, or trusted contact

Claim they are locked out of their account

Say they have accidentally sent you a code

Pose as WhatsApp support or a business

They will ask you to share a 6‑digit WhatsApp verification code.

👉 Sharing this code allows the criminal to take control of your WhatsApp account.

How to Protect Yourself

✅ Never share a WhatsApp verification code

WhatsApp will never ask for this code

No legitimate person or organisation needs it

Anyone requesting a code is attempting to compromise your account

✅ Enable Two‑Step Verification

This adds an extra layer of security to your account.

To enable:

Open WhatsApp

Go to Settings → Account → Two‑step verification

Set a PIN and add a recovery email address

✅ Be alert to unexpected or urgent messages

Criminals often create urgency or ask you to keep requests secret.

✅ Verify unusual requests

If a contact asks for money or codes:

Check using another method, such as a phone call or in‑person conversation

✅ Do not share unsolicited codes

If you receive a WhatsApp code you did not request:

Do not share it

Delete the message

🚨 If Your WhatsApp Account Is Taken Over

✅ Re‑register your number immediately

Open WhatsApp and verify your phone number again

This action will remove the offender’s access

✅ Report the incident

Report the scam to Report Fraud
👉 https://www.reportfraud.police.uk or 0800 123 2040

Reporting helps build intelligence and protect others from becoming victims

✅ Secure your account once access is restored

Enable Two‑Step Verification

Set a strong PIN and recovery email address

Review linked devices and remove any you do not recognise

✅ Inform your contacts

Let friends and family know your account was compromised

Ask them to ignore any recent messages requesting money, codes, or personal information

Please Share This Message

Awareness plays a vital role in prevention. Sharing this information helps protect individuals and the wider community from fraud.

If something doesn’t feel right — pause, verify, and report.

Reply to this message

Message Sent By
Simon Partington
(Wiltshire Police, Cyber Crime Prevent and Protect Officer, Digital Investigations and Intelligence Unit)