") no-repeat center center;background-size:10px 16px;content:' '}@media(min-width:768px){.egqDdf::before{display:none}}.gEpeSZ{margin:0 auto;clear:both}.article-liveblog .gEpeSZ{overflow:hidden}.ffBOtG{width:100%;max-width:100%;min-height:400px}@media(min-width:1000px){.iZGsHB .taboola{display:none}}.iZGsHB:has(#taboola-carousel-thumbnails){min-height:426px}.iZGsHB:has(#taboola-mid-article-thumbnails-crime){min-height:405px}@media(min-width:1000px){.iZGsHB:has(#taboola-carousel-thumbnails),.iZGsHB:has(#taboola-mid-article-thumbnails-crime){min-height:0}}.fLVhoJ .tp-container-inner,.fLVhoJ .sc-1suqprf-0{position:relative;box-shadow:0 -22px 16px 22px rgba(255,255,255,0.95);box-shadow:0 -22px 16px 22px light-dark(rgba(255,255,255,0.95),rgba(0,0,0,0.95))}.fLVhoJ.closed{display:none}.LyMAA{width:32px}.LyMAA,.LyMAA:focus{color:#3b5998;color:light-dark(#3b5998,#627aac)}.LyMAA:hover,.LyMAA:active,.LyMAA:focus-visible{color:#2f4779;color:light-dark(#2f4779,#9cabcb)}@media(min-width:768px){.LyMAA.mobile-only{display:none}}.dwVQBR{width:32px}.dwVQBR,.dwVQBR:focus{color:#000;color:light-dark(#000,#4e4e4e)}.dwVQBR:hover,.dwVQBR:active,.dwVQBR:focus-visible{color:#4e4e4e;color:light-dark(#4e4e4e,#919191)}@media(min-width:768px){.dwVQBR.mobile-only{display:none}}.dxQkdZ{width:32px}.dxQkdZ,.dxQkdZ:focus{color:#25d366;color:light-dark(#25d366,#25d366)}.dxQkdZ:hover,.dxQkdZ:active,.dxQkdZ:focus-visible{color:#1da851;color:light-dark(#1da851,#1da851)}@media(min-width:768px){.dxQkdZ.mobile-only{display:none}}.fKhHgh{width:32px}.fKhHgh,.fKhHgh:focus{color:#ec1a2e;color:light-dark(#ec1a2e,#ec1a2e)}.fKhHgh:hover,.fKhHgh:active,.fKhHgh:focus-visible{color:#ac2a2c;color:light-dark(#ac2a2c,#ac2a2c)}@media(min-width:768px){.fKhHgh.mobile-only{display:none}}.fMVKDn{display:flex;gap:12px}.kHbRaW .sc-17yxc4y-0{display:none}.kHbRaW:hover .sc-17yxc4y-0,.kHbRaW.bookmark-button-saved .sc-17yxc4y-0{display:block}.kHbRaW:hover .sc-17yxc4y-1,.kHbRaW.bookmark-button-saved .sc-17yxc4y-1{display:none}.kHbRaW.bookmark-button-saved .sc-17yxc4y-0{display:block}.kHbRaW.bookmark-button-saved .sc-17yxc4y-1{display:none}.kHbRaW.bookmark-button-saved:hover .sc-17yxc4y-0{display:none}.kHbRaW.bookmark-button-saved:hover .sc-17yxc4y-1{display:block}.eoiTHI{display:inline-block;width:32px;height:32px;color:#337e81;color:light-dark(#337e81,#337e81)}.gsHIni{display:flex;flex-direction:row;justify-content:center;gap:12px}.jTEZjg{display:flex;position:relative;justify-content:center}@media(min-width:768px){.jTEZjg{justify-content:flex-end;padding-top:12px;margin:0}}.laxBOB{display:flex}.sticky .laxBOB{flex-direction:column}.hDXmfN{overflow:hidden;height:23px;margin-bottom:8px;border-bottom:0;clear:both}@media(min-width:768px){.hDXmfN{height:25px}}.jGyHqZ{display:inline-block;flex-shrink:0;margin:0 12px 0 0;font:bold 14px/normal 'Indy Sans','Indy Sans Fallback',sans-serif}.jGyHqZ::after{content:':'}.bsdbXr{display:inline-block;margin-right:12px;margin-bottom:4px;color:#222;color:light-dark(#222,#fff);font:normal 14px/1.29 'Indy Sans','Indy Sans Fallback',sans-serif;text-decoration:underline}.bsdbXr::first-letter {text-transform:capitalize}@media(min-width:1000px){.subscribed .eWQiqu{margin-top:-184px}.article-feature:not(.article-feature-video) .subscribed .eWQiqu{margin-top:-407px}}.eWQiqu>p{margin:16px 0}.article-premium .eWQiqu>p{line-height:27px}.eWQiqu>h2{font-size:21px}.article-climate .eWQiqu>h2{color:#ec1a2e;color:light-dark(#ec1a2e,#ec1a2e)}.article-sgi .eWQiqu>h2{color:#ec1a2e;color:light-dark(#ec1a2e,#ec1a2e)}.eWQiqu>p:first-child{margin-top:0}.eWQiqu span:first-child~p:first-of-type{margin-top:0}.gCqUwG{display:flex;position:relative;max-width:100%;min-height:600px;justify-content:center;margin:0 auto;background-color:transparent;clear:both}@media(min-width:1000px){.gCqUwG{min-height:450px}}.teads .gCqUwG{display:block}.gCqUwG [data-mpu]{position:sticky;top:16px}.bnnSMt{display:inline-block;flex-shrink:0;border-radius:50%;background:#ec1a2e;background:light-dark(#ec1a2e,#ec1a2e);color:#fff;color:light-dark(#fff,#fff)}.dyOTMk{display:flex;width:100%;box-sizing:border-box;margin:0 0 16px;border:1px solid #d3d3d3;border:1px solid light-dark(#d3d3d3,#919191)}.ctojrZ{box-sizing:border-box;flex:1;padding:12px 16px 12px 12px}@media(min-width:595px){.ctojrZ{padding-bottom:8px}}.eSMJoa{width:135px}.eSMJoa img{object-fit:cover}@media(max-width:594px){.eSMJoa{display:none}}.hQdxjk{display:flex;align-items:center;gap:28px}.hyDlTi{margin:0;color:#222;color:light-dark(#222,#fff)}.jbHTit{display:none;font:bold 16px/19.2px 'Indy Serif','Indy Serif Fallback',serif}@media(min-width:595px){.jbHTit{display:block}}.enAvqf{font:bold 20px/24px 'Indy Serif','Indy Serif Fallback',serif}@media(min-width:595px){.enAvqf{display:none}}.bOSXQc{display:none;font:bold 20px/24px 'Indy Serif','Indy Serif Fallback',serif}.bSxdBx{display:none}.fBEvvh{align-self:flex-start;margin-left:auto}.tuUlp{display:flex;gap:16px;margin-top:4px}.nkzAb{--input-height:38px;width:100%;margin:0}.nkzAb label,.nkzAb label+span{position:absolute;overflow:hidden;width:.01em;height:.01em;padding:0;border:0;clip:rect(0,0,0,0);white-space:nowrap}.gJJjCf{height:38px;margin:8px 0 16px}.gUEecR{--color:#646464;--check-border-color:#919191}@supports(color:light-dark(red,red)){.gUEecR{--color:light-dark(#646464,#bdbdbd)}}@supports(color:light-dark(red,red)){.gUEecR{--check-border-color:light-dark(#919191,#646464)}}.cVnlb{margin-block:0;font:normal 9px/13px 'Indy Sans','Indy Sans Fallback',sans-serif}.bXaOEb{display:flex;min-height:600px;justify-content:center}@media(min-width:1000px){.bXaOEb{min-height:450px}}.dlrgtE{min-height:600px}@media(min-width:1000px){.dlrgtE{min-height:450px}}.dlrgtE.mobile-only{display:block}@media(min-width:1000px){.dlrgtE.mobile-only{display:none}}.dlrgtE.desktop-only{display:none}@media(min-width:1000px){.dlrgtE.desktop-only{display:block;margin-bottom:16px}}.dlrgtE.desktop-only+p{margin-top:0}.dlrgtE .third-party-ad{position:sticky;top:16px}.fhuRbW{width:100%;flex-grow:1}.fhuRbW .social-share{width:100%;padding-top:10px;padding-bottom:20px}@media(min-width:768px){.fhuRbW .social-share{justify-content:flex-start}}.fhuRbW .social-share.sticky{display:none}@media(min-width:1000px){.fhuRbW .social-share.sticky{display:flex;position:sticky;top:14px;width:34px;flex-direction:column;padding-top:0;margin-top:0;margin-left:-25%}.fhuRbW .social-share.sticky .sc-mgcah7-0{margin:0 0 16px}.article-feature-video .fhuRbW .social-share.sticky{margin-top:0}.article-feature:not(.article-feature-video) .fhuRbW .social-share.sticky{margin-top:35%}}.fhuRbW.sponsored-article img,.fhuRbW.sponsored-article video{width:100%;max-width:602px;height:auto}.fhuRbW.sponsored-article iframe{max-width:602px;max-height:400px}.fhuRbW .under-article-prompt-donations{padding-bottom:8px;margin-top:-3px}.fhuRbW .big-letter{--color:#222;display:flex;position:relative;width:0;height:0;align-items:center;justify-content:center;padding:40px;margin-top:22px;margin-right:12px;border:1px solid var(--color);float:left;font:normal 52px/1 'Indy Serif','Indy Serif Fallback',serif;text-transform:uppercase}.fhuRbW .big-letter:first-child{margin-top:6px}.fhuRbW .big-letter::before{position:absolute;top:0;left:0;width:100%;height:100%;box-sizing:border-box;border:1px solid var(--color);border-radius:50%;content:''}.fhuRbW #taboola-below-article-1{min-height:2350px}@media(min-width:768px){.fhuRbW #taboola-below-article-1{min-height:3370px}}.fhuRbW #taboola-below-article-1-split-num-1{min-height:130px}@media(min-width:768px){.fhuRbW #taboola-below-article-1-split-num-1{min-height:415px}}.fhuRbW .sc-fwko30-0+.sc-1xtsh2b-0{margin-top:-16px}@media(min-width:768px){.fhuRbW{max-width:636px;margin:0}}@media(min-width:1000px){.fhuRbW{max-width:624px;margin:0}.fhuRbW.subscribed{max-width:636px}}@media(max-width:999px){.fhuRbW{padding-right:0}.fhuRbW .under-article-prompt-donations{margin-top:-18px}}.fhuRbW .anchor-nav-header{scroll-margin-top:79px}.fhuRbW .anchor-nav-header a{color:#222;color:light-dark(#222,#fff)}.fhuRbW .anchor-nav-header a:hover{color:#222;color:light-dark(#222,#fff)}@supports(color:light-dark(red,red)){.fhuRbW .big-letter{--color:light-dark(#222,#fff)}}.enFqNy{display:flex;flex-wrap:wrap;justify-content:flex-start;margin-bottom:8px;color:#646464;color:light-dark(#646464,#bdbdbd);font:normal 16px/20px 'Indy Sans','Indy Sans Fallback',sans-serif}@media(min-width:768px){.enFqNy{width:70%;align-items:center;justify-content:flex-start;margin-bottom:0;font:normal 16px/24px 'Indy Sans','Indy Sans Fallback',sans-serif}}@media(min-width:1000px){.enFqNy{width:70%;margin-bottom:0}}.hWBwna{display:flex;height:20px;margin:0 12px 8px 0}.article-voices .hWBwna{height:auto}@media(min-width:425px){.article-voices .hWBwna{height:20px}}.hWBwna::before{display:inline-block;align-self:center;margin-top:1px;margin-right:12px;content:'\2022';transform:scale(1.5)}.hWBwna:first-child::before{content:none}@media(min-width:768px){.hWBwna{height:24px;margin-bottom:0}.hWBwna::before{margin-top:2px}}.hWBwna time{display:block}.hWBwna time::first-letter {text-transform:capitalize}.hYsQrG{display:inline-block;margin:0 12px 8px 0;color:#ec1a2e;color:light-dark(#ec1a2e,#ec1a2e);font:bold 16px/20px 'Indy Sans','Indy Sans Fallback',sans-serif;letter-spacing:-0.5px}.hYsQrG:hover,.hYsQrG:active{color:#ac2a2c;color:light-dark(#ac2a2c,#ac2a2c)}@media(min-width:768px){.hYsQrG{margin-bottom:0}}.hSzzTd{margin:0 4px 8px 0}.hSzzTd::before{display:inline-block;margin-top:2px;margin-right:12px;color:#646464;color:light-dark(#646464,#bdbdbd);content:'\2022';transform:scale(1.5)}.hSzzTd:first-child::before{display:none}@media(min-width:768px){.hSzzTd{margin-bottom:0}}.fkbzZm{display:flex;justify-content:flex-start;padding:0;margin:0 0 16px}@media(min-width:768px){.fkbzZm{display:flex;width:30%;align-items:center;justify-content:flex-end;margin:0}}@media(min-width:1000px){.fkbzZm{width:30%}}.eTZxgZ{padding-top:0;border-top:0;border-bottom:0}@media(min-width:768px){.eTZxgZ{display:flex;flex-flow:row wrap;padding-bottom:16px}.eTZxgZ .sc-mzrbq8-0{order:1}.eTZxgZ .sc-mzrbq8-6{order:2}}@media(min-width:1000px){.eTZxgZ{flex-direction:row}}.hkkJDp{padding:16px 12px 12px;text-align:left;font:bold 14px/18px 'Indy Sans','Indy Sans Fallback',sans-serif}@media(min-width:768px){.hkkJDp{padding:16px 16px 12px}}.article-infact .hkkJDp{padding:16px 0}@media(min-width:1000px){.hkkJDp{padding:24px 0 19px}.article-feature .hkkJDp{max-width:968px;margin:0 auto}}.hkkJDp a{color:#222;color:light-dark(#222,#fff)}.hkkJDp a:hover{color:#ac2a2c;color:light-dark(#ac2a2c,#f58992)}.hkkJDp a:hover::after{color:#222;color:light-dark(#222,#fff)}.hkkJDp a::after{margin-right:4px;margin-left:4px;content:'>'}.hkkJDp a:last-child::after{display:none}.hMldFc{margin:0 0 20px;letter-spacing:0}.bWngPc{margin:0;color:#646464;color:light-dark(#646464,#bdbdbd);font:normal 16px/20px 'Indy Sans','Indy Sans Fallback',sans-serif}@media(min-width:768px){.bWngPc{font:normal 18px/22px 'Indy Sans','Indy Sans Fallback',sans-serif}}@media(min-width:1000px){.bWngPc{font:normal 20px/24px 'Indy Sans','Indy Sans Fallback',sans-serif}}.bWngPc p{font:inherit}.article-feature .bWngPc a{font-weight:bold}.dnkfpp{max-width:968px;margin:0 auto;background:#fff;background:light-dark(#fff,#000)}@media(min-width:1000px){.dnkfpp{padding:0 16px}.parallax .dnkfpp{max-width:1240px}}.Rdknw{font:bold 32px/36px 'Indy Serif','Indy Serif Fallback',serif;letter-spacing:-0.0156em}@media(min-width:768px){.Rdknw{font:bold 44px/48px 'Indy Serif','Indy Serif Fallback',serif;letter-spacing:-0.0113em}}@media(min-width:1000px){.Rdknw{font:bold 54px/58px 'Indy Serif','Indy Serif Fallback',serif;letter-spacing:-0.0092em}}.gwrTGe .sc-qvufca-0{margin:0 12px}@media(min-width:768px){.gwrTGe .sc-qvufca-0{max-width:968px;margin-right:16px;margin-left:16px}}@media(min-width:1000px){.gwrTGe .sc-qvufca-0{margin-right:auto;margin-left:auto}}.gwrTGe .sc-qvufca-2{margin-bottom:16px;color:#222;color:light-dark(#222,#fff)}@media(min-width:768px){.gwrTGe .sc-qvufca-2{margin-bottom:18px}}@media(min-width:1000px){.gwrTGe .sc-qvufca-2{margin-top:0}}.article-feature .gwrTGe .sc-qvufca-2{text-align:center}@media(min-width:1000px){.article-feature .gwrTGe .sc-qvufca-2{max-width:968px}}.gwrTGe .sc-aeekvc-0{margin-bottom:16px}@media(min-width:1000px){.gwrTGe .sc-aeekvc-0{max-width:968px}}.gwrTGe .sc-aeekvc-0 p{margin-top:0}@media(min-width:768px){.gwrTGe .sc-aeekvc-0 p{margin-bottom:16px}}@media(min-width:2560px){.gwrTGe .sc-aeekvc-0 p{margin-bottom:12px}}.iExVwO{overflow:hidden;height:0;color:transparent}.VkEbW{max-width:100%;margin:0 0 20px}.VkEbW.sticky{position:sticky;top:16px}.jpuEXf{min-height:600px}.jpuEXf #mpu1,.jpuEXf #sidebar1{position:sticky;top:16px}.bIVNVq{min-height:250px}.dcXsiQ{max-width:100%}.loNRDw{margin:0 0 6px;color:#646464;color:light-dark(#646464,#bdbdbd);font-family:'Indy Sans','Indy Sans Fallback',sans-serif;font-size:15px}.ezMsnK{margin:0 0 12px}.iIPWMQ{height:380px}.gXoWZo{width:100%;height:51px}.hjNIYD{margin-bottom:16px;border-bottom:1px solid #919191;border-bottom:1px solid light-dark(#919191,#646464)}.vzWDo{margin-bottom:16px}.vzWDo [role='listitem']{position:relative;margin-bottom:12px;border-bottom:1px solid #d3d3d3;border-bottom:1px solid light-dark(#d3d3d3,#919191)}.vzWDo [role='listitem'] .sc-u4n1j-0{display:flex;position:absolute;bottom:16px;left:10px;width:32px;height:32px;align-items:center;justify-content:center;border-radius:50%;background-color:#ec1a2e;background-color:light-dark(#ec1a2e,#ec1a2e)}.vzWDo [role='listitem'] .sc-u4n1j-0>svg{width:90%;fill:#fff;fill:light-dark(#fff,#000);stroke:transparent}.vzWDo [role='listitem']:first-child{display:block;padding-bottom:0;margin-bottom:12px}.vzWDo [role='listitem']:first-child .sc-u4n1j-0{top:-15px;bottom:auto;left:12px}.vzWDo [role='listitem']:first-child>*:first-child{display:block;width:100%;height:205px}.vzWDo [role='listitem']:first-child>*:last-child{--content-bg:#222;--content-bg-opaque:rgba(34,34,34,0.7);position:absolute;bottom:0;width:100%;padding:28px 12px 12px;background:linear-gradient(to top,var(--content-bg) 70%,var(--content-bg-opaque) 100%) no-repeat;color:#fff;color:light-dark(#fff,#222);font-size:17px;font-weight:bold}.vzWDo [role='listitem']:last-child{margin-bottom:0;border-bottom:0 none}@supports(color:light-dark(red,red)){.vzWDo [role='listitem']:first-child>*:last-child{--content-bg:light-dark(#222,#000)}}@supports(color:light-dark(red,red)){.vzWDo [role='listitem']:first-child>*:last-child{--content-bg-opaque:light-dark(rgba(34,34,34,0.7),rgba(0,0,0,0.7))}}.clClJO{min-height:1924px}@media(max-width:767px){.clClJO{display:none}}.doEDPw{width:308px}.doEDPw.hidden{display:none}@media(max-width:999px){.doEDPw{display:none}}.article-liveblog .ebbjSB{background-color:#f7f7f7;background-color:light-dark(#f7f7f7,#222)}.ghFVC{justify-content:center}.clCHwE{justify-content:center}
Tech WhatsApp warning over scam that allows criminals to lock account and access messages Hacker poses as friend to steal six-digit verification code and take over account
WhatsApp users are being warned about a scam which could allow hackers access to lock account (Getty Images)
Sign up to our free weekly IndyTech newsletter delivered straight to your inbox Sign up to our free IndyTech newsletter Sign up to our free IndyTech newsletter WhatsApp users are being warned about a worrying scam which has seen people locked out of their accounts.
Users have been tricked into handing over a six-digit “verification code” which hackers have then used to steal their account and attack their contacts in the same way.
The old scam begins when a hacker gets access to another WhatsApp account which will have you listed as a contact.
The hacker, posing as your friend, will then send you seemingly normal messages.
However, around the same time you will receive a text message or email from WhatsApp with a six-digit code.
This is because the attacker has requested the code from WhatsApp while pretending to be you.
The person posing as your friend will claim they have sent the code to the wrong account and ask you to help by sending it to them.
Victims will reportedly receive a message, seemingly from their friend, which says something similar to: “Hello, sorry, I sent you a 6-digit code by mistake, can you pass it to me please? It's urgent?”
This six-digit code is only ever generated when you are trying to log in or make changes to an account.
If you do send the code, the attack will be successful and the hacker will gain access to your account.
One WhatsApp user, whose relatives had been targeted by the scam, posted on Twitter: “Three members of my family have lost access to their WhatsApp this morning.
“Hackers send a text message from WA with a verification code, then a WhatsApp text from someone you know saying they desperately need the code. Do not send the code or click the link.”
To protect your account, never give your six-digit code out to anyone else, under any circumstances.
You can also set up two-factor authentication which will require a pin number to log into your WhatsApp account.
Thank you for registering Please refresh the page or navigate to another page on the site to be automatically logged in Please refresh your browser to be logged in
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments