--- title: "Verification code scams: never share a code | TapSafely" url: https://tapsafely.com/scams/verification-code-scams source: TapSafely description: "“I sent you a code by mistake, can you send it back?” How scammers steal WhatsApp, email and bank accounts with one-time codes, and how to lock yours down." --- [Home](https://tapsafely.com/)/[Scam guides](https://tapsafely.com/scams/)/ Verification-code and account-takeover scams # Verification-code and account-takeover scams A friend messages: “Sorry, I sent a 6-digit code to your phone by mistake, can you forward it?” The friend's account has already been taken over. The code is the key to yours. By the TapSafely editorial team · Updated 16 September 2026 · 3 min read ## In short “I sent you a code by mistake, can you send it back?” How scammers steal WhatsApp, email and bank accounts with one-time codes, and how to lock yours down. **Top warning signs:** Anyone asking for a code, even a friend; A code arrives that you didn't request; Calls from “support” asking you to read a code to verify you. **First thing to do:** Never share codes. Ignore and delete unexpected ones. Example · WhatsApp · Illustrative, links disabled A friend's name Hi! Sorry I accidentally sent you a 6 digit code by SMS, can you send it to me please? It's urgent 🙏 An example scam message with the warning signs highlighted. ## How the scam works One-time codes confirm that you are the owner of an account. When a scammer tries to log in to your WhatsApp, email or bank, the service sends you a code. If you share it, they're in, and you may be locked out. Taken-over accounts are then used to message your contacts with the same trick or with money requests. ## Red flags to look for - **Anyone asking for a code, even a friend.** Codes are for you only. No exceptions. - **A code arrives that you didn't request.** Someone is trying to access your account. - **Calls from “support” asking you to read a code to verify you.** Real support never asks for this. ## What to do if you get one 1. Never share codes. Ignore and delete unexpected ones. 2. Turn on two-step verification: in WhatsApp, go to Settings → Account → Two-step verification and set a PIN. 3. Use a password manager and unique passwords so one breach doesn't open everything. ## If you already paid or shared details ### Act quickly. It makes a difference. 1. Try to log back in straight away. The service will send you a new code. 2. Change your password and enable two-step verification. Warn your contacts that messages from you may be fake. 3. If a bank code was shared, call your bank now. More help: [what to do after a scam, and where to report it in your country](https://tapsafely.com/been-scammed). ## Questions people ask My friend really did send it. Can I trust them? Your friend's account may already be hacked. Call them to check. Either way, never forward a code. ## Official sources and further reading We check our guides against advice from government agencies and consumer protection bodies. - [What's a verification code and why would someone ask me for it?](https://consumer.ftc.gov/consumer-alerts/2024/03/whats-verification-code-why-would-someone-ask-me-it) (US Federal Trade Commission) - [Account or identity takeover scams](https://www.scamwatch.gov.au/types-of-scams/account-or-identity-takeover-scams) (Scamwatch, Australian Competition and Consumer Commission) ### Got a message like this? Paste the message or link Check it free ### Still unsure? Describe what happened and our AI assistant will help, in any language. Ask TapSafely ### On this page 1. [How it works](#how) 2. [Red flags](#red-flags) 3. [What to do](#what-to-do) 4. [If you already paid](#already-paid) 5. [Questions](#faq) 6. [Sources](#sources) ### Seen this scam? Your report helps warn people in your area. [Report it](https://tapsafely.com/report?category=account) ## Related guides [Guide ### The “Hi Mum, this is my new number” scam A message from a new number says it's your child and asks for money. How the Hi Mum scam works and how to check who you'… Read guide](https://tapsafely.com/scams/hi-mum-new-number-scam)[Guide ### Phishing links and fake login pages Learn the one skill that stops most scams: reading who really owns a link. With examples of look-alike addresses and fak… Read guide](https://tapsafely.com/scams/phishing-links)[Guide ### Bank impersonation and “safe account” scams A caller from your bank's "fraud team" says your money is at risk. No bank ever asks you to move money to a safe account… Read guide](https://tapsafely.com/scams/bank-safe-account-scam)