
“Send me the code” account takeovers
Also known as: Google Voice code scam, 2FA code scam, WhatsApp account hijack
How it works
A match says they want to 'make sure you are real' and asks for your phone number, then sends you a six-digit code and asks you to read it back. The code is actually a login or setup code for one of your accounts, or for a Google Voice number linked to your phone. Sharing it lets the scammer create a disguised number in your name to scam others, or take over your WhatsApp, email or social account and use it to target your contacts. On WhatsApp the approach often comes from a hijacked friend's account claiming the code was 'sent to you by mistake'.
Red flags
- A match asks you to read back or forward a verification code sent to your phone
- They say they need a code to prove you are real or not a bot
- You receive a login or setup code you did not request
- A friend's account messages asking for a code 'sent to you by mistake'
Recent cases
Real cases reported by courts, police, regulators and the press. People facing pending charges are presumed innocent, and private victims are not named.
The numbers
- IC3 received about 4,700 account-takeover complaints with $359.7 million in losses (impersonation of financial-institution support). (2025) source
If it is happening to you
- Never share any verification code with anyone – FTC advice is not to share 'any verification code' with someone you don't know.
- If you shared a Google Voice code, reclaim your number at voice.google.com/regain.
- Turn on two-step verification in WhatsApp (Settings > Account > Two-step verification) and on email/social accounts.
- Change passwords and check account recovery details if you shared a code; warn contacts if an account was taken over.
Where to report
Related scams

Romance scams
A scammer builds an online relationship using a fake or borrowed identity, often over weeks or months, and invests heavily in attention and affection.

Pig butchering
A friendly or flirtatious contact – often on a dating app, social media or a 'wrong number' text – builds a relationship and casually mentions success trading crypto, gold or forex as a 'side job'.

Sextortion and image blackmail
The criminal poses as an attractive person (often a young woman) on a dating app, social media or game, flirts quickly, and persuades the target to exchange nude images or join an intimate video call that is secretly recorded.
Sources
- https://consumer.ftc.gov/consumer-alerts/2022/07/selling-stuff-online-heres-how-avoid-scam
- https://www.aarp.org/money/scams-fraud/google-voice-scams/
- https://www.wired-gov.net/wg/news.nsf/articles/Warning+issued+to+WhatsApp+users+over+account+takeover+scam+27032023122500
- https://lifelock.norton.com/learn/fraud/online-dating-scams
- https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf
Research compiled 28 September 2026.
