A new warning for WhatsApp users
Albanian State Police warned on 28 July 2026 that fraudulent messages and links are circulating with the aim of taking control of WhatsApp accounts. The scheme often begins with an apparently harmless request, such as voting in a competition or confirming an action.
After a user opens the link, the attackers try to persuade them to enter or disclose WhatsApp’s six-digit verification code. This is not an ordinary code: it can be used to register the account on another device. Once the code is surrendered, another person may gain control of the account and contact friends or relatives while impersonating its owner.
Why a message from someone you know may still be dangerous
Police advise users not to open suspicious links even when they arrive from a known contact. The sender’s account may already have been compromised and could be used to spread the same scheme through its contact list.
Any request for a verification code should be treated as a warning sign. The code should never be shared and should not be entered on pages reached through an unexpected message. A competition, offer or urgent request is not a reason to hand over the key that protects an account.
What users should do now
Police recommend enabling two-step verification inside WhatsApp. This feature adds another layer of protection beyond the code delivered by SMS or through the app.
If users suspect that an account has been compromised, they should act immediately to recover it and warn their contacts. Alerting contacts reduces the chance that an attacker can request money, codes or personal information while using the victim’s identity.
The practical check is straightforward: do not open suspicious links, never share the six-digit code and enable two-step verification. These measures do not replace caution, but they make account takeover substantially more difficult.