WhatsApp Safety — Lock Down Your Account and Spot the Scams
WhatsApp is where India talks — and increasingly, where India gets scammed. Because you trust messages from people you know, a hijacked account or a well-worded stranger can do real damage before anyone realises. The defences are simple, and mostly free. Here's how to lock your account and recognise the scams.
First: the two settings that stop most trouble
1. Turn on two-step verification
This is the single most important thing you can do. Two-step verification adds a 6-digit PIN that's required to register your number on a new device — so even if a scammer tricks you into sharing the SMS OTP, they still can't take over your account.
WhatsApp → Settings → Account → Two-step verification → Turn on.
Choose a PIN you'll remember (not your UPI PIN), and add your email for recovery.
2. Never share your WhatsApp registration code
The most common account-hijack works like this: a scammer (often from a hacked friend's account) messages "I accidentally sent my verification code to your number, please forward it". That 6-digit code is your account's registration code. Forward it and they register your number on their phone — locking you out and then scamming your contacts as "you".
Your WhatsApp code is never for anyone else. WhatsApp never asks for it, and no friend genuinely needs you to forward a code. Never share it — and with two-step verification on, even a leaked code isn't enough.
The scams doing rounds in India
The "hi mum / hi dad" money trick
A message from an unknown number: "Hey, this is my new number — my phone broke. Can you urgently pay this bill / send money, I'll return it tonight?" The tone is family; the number is new. Real relative or not, verify on their old, saved number before sending a rupee. Agree a family code word for genuine emergencies.
Investment and "task" groups
You're added to a group promising daily stock tips, or messaged about "part-time jobs" paying you to like videos or leave reviews — with small early payouts to build trust, then a demand to "deposit to unlock earnings". These are the same investment/task-fraud scripts that cost Indians thousands of crores. No genuine job asks you to pay to get paid.
Malicious files and APKs
A wedding invite, an "electricity bill", or a "courier update" arrives as an APK file or a link. Installing it can hand a scammer access to your phone, OTPs and banking apps. Never install apps from chat attachments — only from the Play Store / App Store.
Fake verification and "your account will be blocked"
Messages claiming your WhatsApp will be "deactivated" unless you click a link or share a code are phishing. WhatsApp communicates inside the app, not via panic links.
Lock down your privacy settings
| Setting | Where | Why |
|---|---|---|
| Two-step verification | Settings → Account | Blocks account takeover |
| Profile photo → My contacts | Settings → Privacy | Stops strangers copying your photo for fake profiles |
| Silence unknown callers | Settings → Privacy → Calls | Cuts spam and scam calls |
| Groups → My contacts | Settings → Privacy → Groups | Stops strangers adding you to scam groups |
| Last seen / online → contacts | Settings → Privacy | Reduces what strangers can learn about you |
| App lock (fingerprint) | Settings → Privacy → App lock | Protects chats if your phone is unlocked |
If your account is hijacked
- Re-register your number on WhatsApp — enter the SMS code sent to you. This logs the scammer out (a phone number can be active on only one WhatsApp account).
- If you can't get back in, email support@whatsapp.com from your registered address.
- Warn your contacts (via calls or another app) not to send money or click links from your account.
- If money was lost, call 1930 and file at cybercrime.gov.in.
- Turn on two-step verification the moment you regain access.
Spend ten minutes tonight enabling two-step verification on your parents' and kids' phones, and set a family code word. Most WhatsApp scams work by targeting the least protected person in a family — close that gap.
The bottom line
WhatsApp safety comes down to a few habits: two-step verification on, your registration code shared with no one, money requests verified on a known number, and files installed only from official stores. Do those, tighten your privacy settings, and the trust that makes WhatsApp useful stops being the thing that gets you scammed.
How this guide is made
Written and fact-checked by the Awareness360 editorial team from primary sources — RBI, SEBI, IRDAI, the Income Tax Department and Government of India portals — with links to the originals in the text above. Last reviewed on 16 Jul 2026. This is general educational information for Indian readers, not professional financial, legal or tax advice.
Spotted something out of date? Tell us and we'll correct it — see our editorial policy.