Is this account alert from WhatsApp a scam?
No. WhatsApp is a legitimate messaging app used by millions of Australians. The scams travel through it rather than from it: 'Hi Mum' messages from unknown numbers posing as family in trouble, and requests to hand over the six-digit verification code that unlocks your account. The good news: a few quick checks almost always tell a real WhatsApp message from a fake.
Genuine WhatsApp links lead to whatsapp.com — but a link can be made to look real, so don't go by the link alone. Below is how genuine WhatsApp contact usually works, the scams commonly run in its name, the red flags that give a fake away, and an example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real WhatsApp message looks like
Genuine messages from WhatsApp link to whatsapp.com. Treat a link to any other address as a warning sign.
- WhatsApp says someone trying to take over an account needs the SMS verification code sent to that phone number, and that you should not share your registration code with others, not even friends or family
- WhatsApp says you can receive a verification code you didn't request when another user mistakenly types your number, and that it can also happen when someone attempts to take over your account, so a code on its own isn't proof of an attack
- WhatsApp says it is a free app, and that someone who requests payment for using WhatsApp or offers to unban your account in exchange for payment is likely after your financial or personal information
- A saved name isn't proof of who is writing, so for a 'new number' message call the person on a number you already have
What a genuine WhatsApp contact shouldn't do
- Offer to unban your account or ask you to pay to use WhatsApp; WhatsApp says it is a free app, and that someone who does this is likely after your financial or personal information
- Ask you to tap a link, activate a new feature through a link or download an app; WhatsApp lists these among the signs of a suspicious message
- Ask you to read out or forward a six-digit verification code; WhatsApp says you should not share your registration code with others, not even friends or family
- Contact you from an unknown number claiming to be support or a family member; a saved name isn't proof either, so call the person on a number you already have
Common WhatsApp scams
- Unknown number texts you pretending to be your child or parent in distress and asks for money or gift cards
- Scammer claims they lost their phone and need a 6-digit WhatsApp verification code you just received
- Message arrives from a new number saying a family member’s account has been hacked and you must forward the code
Red flags to watch for
- Sender is an unknown Australian mobile number you have never saved
- Message asks you to share a WhatsApp verification code you just received
- Urgent request for money or gift cards from someone claiming to be family but using a different number
- Any link or attachment that claims to be from WhatsApp support
WhatsApp scam examples
These composed examples show how scams impersonating WhatsApp typically read, with the tells that give each one away. Compare them against anything you've received.
Hi Mum, this is my new number, my phone got smashed. I need to pay a bill before 5pm and my banking app is locked out on the old phone. Can you transfer $500 to a friend's account for me? I'll fix you up tonight, promise x
What gives it away:
- An unknown number claiming to be family, plus a money request, is the 'Hi Mum' pattern; the affection and small talk are part of the script
- The 'banking app is locked out' story is the reason offered for why you should pay on their behalf; check with your child before moving any money
- Call your child on the number already stored in your phone before you reply or pay; if they pick up, you have your answer
A WhatsApp message, sometimes from a contact whose account was already taken over: 'So sorry, I accidentally typed your number when logging in. A 6-digit code just came to your phone by SMS. Can you send it through? I'm locked out until you do.'
What gives it away:
- That code is the thing the message is really after; WhatsApp's guidance is not to share your registration code with others, not even friends or family
- The story isn't impossible, so the safe rule is to not share the code with anyone, however believable the reason
- Even a saved friend's name proves nothing here: WhatsApp says if you receive a suspicious message from a known contact, their account could be compromised
Not sure about your message?
Paste the suspicious WhatsApp text or email and get an instant scam verdict, free.
How to verify a message from WhatsApp
WhatsApp's real website is whatsapp.com and the official app is the WhatsApp. Reach WhatsApp through those channels, never through the details inside a message you're unsure about.
- Don't reply, send money, or share any code, no matter how urgent the story sounds
- Contact the family member or friend on the number already saved in your phone, by ordinary call if needed; a real emergency survives a one-minute check
- For anything about your WhatsApp account itself, open the official app and go to Settings > Help, or type whatsapp.com into your browser yourself
- Never enter or forward a verification code you did not request; deleting the message costs you nothing if it was genuine
If you have been scammed in WhatsApp's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you shared a verification code, try to log back in to WhatsApp straight away with your own number; re-verifying can push the scammer out, and turn on two-step verification in Settings once you are back in
- Warn your contacts immediately from another channel, because the hijacked account will start messaging them next
- If you transferred money, call your bank now to try to stop or recall the payment and dispute any card charges
- If you shared identity documents, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward the scam SMS to 7226 so carriers can block the number
Where to report a scam impersonating WhatsApp
Received — or fell for — a message impersonating WhatsApp? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
WhatsApp scam activity in 2026
The 'Hi Mum' family-impersonation play remains the defining WhatsApp scam in Australia, and it keeps evolving: openers have grown chattier, the 'new number' story now comes with photos or voice notes, and the ask has shifted from gift cards toward direct transfers to a 'friend's account'. Running beside it is verification-code theft, where a stranger, or a hijacked friend, begs you to forward a six-digit code, then walks off with your account and repeats the trick on your contacts. Both depend on the same reflex: helping family fast. The habit that defeats them is one call to the number you already have saved, and a flat rule that codes sent to your phone are never shared with anyone.
Frequently asked questions
I got a text from WhatsApp asking for a verification code — is it a scam?
A text carrying a WhatsApp code is not a scam in itself: WhatsApp sends a code by SMS when someone tries to register your number, and says this can happen when another user mistakenly types your number or when someone attempts to take over your account. The scam is the follow-up asking you to read the code out or forward it, and WhatsApp says you should not share your registration code with others, not even friends or family.
My child just texted from a new number saying they need money — could it be real?
It could be, so check before you send anything. WhatsApp says it's common for scammers to pretend to be a friend or family member to trick you into sharing money or personal information. Call your child on the number already saved in your phone, and contact them through a known channel before sending anything.
How do I know if a WhatsApp message is really from a friend?
Don't treat a saved contact as proof: WhatsApp says if you receive a suspicious message from a known contact, their account could be compromised. If in doubt, call the person on a number you already have to confirm.
Where should I report a fake WhatsApp message?
Forward the message to 7226 and report it at scamwatch.gov.au or cyber.gov.au.
What is WhatsApp's real website?
WhatsApp's website is whatsapp.com. Get the app from the App Store or Google Play, and treat a link in a message claiming to be from WhatsApp as a reason to stop: WhatsApp lists asking you to tap a link, activate a new feature through a link or download an app among the signs of a suspicious message. For support, use Settings > Help inside the app or type whatsapp.com yourself.
Someone got into my WhatsApp account. How do I get it back?
Reinstall or reopen WhatsApp and sign in with your own phone number; entering the fresh verification code sent to your SIM ends the scammer's session. Then enable two-step verification in Settings and tell your contacts from another channel to ignore any messages sent while the account was hijacked. Report what happened to Scamwatch (scamwatch.gov.au) and, if money was lost, to ReportCyber (cyber.gov.au).
Scam message examples
Related scam types
Scams impersonating WhatsApp usually fit one of these patterns. Learn how each works:
Related brands
Other social names scammers impersonate — check a message from one:
Sources
- Text or SMS scams (Scamwatch (National Anti-Scam Centre))
- Account or identity takeover scams (Scamwatch (National Anti-Scam Centre))
- Where to report a scam (Scamwatch (National Anti-Scam Centre))
- About suspicious messages and scams (WhatsApp Help Center)
- Received verification code without requesting it (WhatsApp Help Center)
- How to recover a compromised account (WhatsApp Help Center)
This guide is general information, not legal or financial advice — always verify with WhatsApp through an official channel.