"I sent my code to you by mistake" scam
A message from a friend, often on WhatsApp, Instagram, or Facebook, says they accidentally sent their login code to your number. The code is actually for your account, and their account has likely already been hacked.
How this scam works
The scammer starts a login to your account, which sends you a code. If you pass it on, they take over your account and message your friends next.
Common versions of the message
- A code "sent by mistake"
- A request to forward it
- An urgent "I'm locked out"
What the message looks like
Text from Jess
Hey!! So sorry, I accidentally sent my login code to your number instead of mine. Can you send it to me real quick? It's urgent, I'm locked out of my account.
Fictional example based on common, publicly reported scam patterns.
The red flags
- 1
Code "mistake": “accidentally sent my login code to your number”
The code is for your account, not theirs
Login codes are sent to the phone number on that account, which means the code is for yours.
- 2
Share the code: “send it to me real quick”
Sharing it hands over your account
Sharing the code hands over your account.
- 3
Rushed: “It's urgent”
Your friend's account may already be hacked
Your friend's account may already be controlled by the scammer. Call your friend to check.
What to do
- Do not send the code.
- Call or text your friend on a number you already have to warn them.
- Turn on two-step verification for your accounts.
If you already replied, clicked, or paid
- If you shared the code, open the app right away and try to log in. Use its account recovery steps if you are locked out.
- Warn your contacts that messages from you may not be you.
- Change your password and turn on two-step verification once you are back in.
Got a message like this?
Paste it into TrustShield's free checker to see the warning signs in seconds. No sign-up needed to try it.