Verification code request
A friend asks for your verification code. Their account may be compromised.
A message from a real friend can still be dangerous if their account was taken over. Verification codes are meant to prove that you control your account, not to help someone else.
Code request warning signs
- They say the code was sent to you by mistake.
- They ask you to forward a six-digit WhatsApp, email, bank or login code.
- They are urgent, emotional or strangely brief compared with normal messages.
- They avoid a voice call or ask you not to tell anyone.
Safe response
Do not send the code. Call the person through a known number, not the chat. If you already shared it, secure the affected account immediately and warn contacts if the account was taken over.
Why would a friend ask for my code?
Often because their account has been compromised and the attacker is using their identity to take over more accounts.
What if I already shared the code?
Act quickly: re-secure the account, log out unknown sessions, enable two-factor authentication and tell close contacts to ignore suspicious messages.
Quick risk snapshot
A real friend almost never needs your login, WhatsApp, bank or email verification code. Attackers use compromised accounts to ask contacts for codes and then take over more accounts.
What to do before the next reply or payment
- Call the person through a trusted number or another channel before replying.
- Never send the code; it is usually meant for your account, not theirs.
- If you already shared it, open the official app, check linked devices and change recovery settings.
- Warn mutual contacts if the friend account appears compromised.
Common mistakes that make recovery harder
- Do not assume the account is safe because the profile photo and chat history look real.
- Do not forward screenshots of one-time codes.
- Do not approve login prompts or QR codes sent by chat.