Your phone lights up. A WhatsApp verification code has arrived.
But you haven’t changed phones, reinstalled WhatsApp or tried to log in anywhere.
So who requested it?
With people talking about stolen accounts, that notification can make you uneasy. An unexpected code does not mean your account has already been stolen—but keep it private.
Why has the code arrived?
WhatsApp says someone has entered your number while trying to register an account. It could be a typing mistake, or an attempt to take over your account. The code alone cannot tell you which.
If someone asks you to forward it, don’t—even if the message comes from a familiar account.
“But I already set my own PIN”
That PIN and the arriving code are different.
The OTP is a temporary registration code. Your two-step verification PIN is the one you created for extra protection. The OTP does not replace your PIN. WhatsApp says two-step verification requires that PIN when registering your number again.
Read each prompt carefully. If you didn’t start the process, pause before following any instructions.
Your account carries other people’s trust
Think about your customers, family and WhatsApp groups.
If someone uses your account to request money, those people may believe they are speaking to you. An unfamiliar EcoCash number might seem harmless when the request carries your name.
Before paying an unexpected request, confirm it through a contact method you already trust.
Take one minute to check
Open Linked Devices in WhatsApp. Do you recognise everything listed? Log out of unfamiliar devices—WhatsApp recommends checking this regularly.
Also enable two-step verification under Settings → Account → Two-step verification.
Already locked out? If WhatsApp says your number was registered on another device, follow Log back in and its official recovery guidance. Warn your contacts through another channel while you recover access.
If you lost access without knowingly sharing a code, keep screenshots of the warnings, with codes hidden. That needs investigation; it does not automatically prove your PIN was bypassed.
The next unexpected code might be a mistake. It might be something more. Either way, don’t hand it to someone else.
