Locked Out by a Two-Step Verification PIN You Didn't Set
After a WhatsApp takeover, scammers often set their own two-step PIN to lock you out. Why they do it, what re-registering still achieves, and how to regain full access.
You re-register your number after a takeover, enter the six-digit code, and then WhatsApp asks for a two-step verification PIN you have never set. The scammer set it, to slow you down.
What is happening
Two-step verification is designed to protect the account owner. After a takeover, the scammer can turn it on with their own PIN. When you try to register again, WhatsApp asks for it.
What to do
- Keep going with registration. Entering the six-digit code from your SIM logs the scammer out of your account, even though you cannot get fully in yet.
- Do not guess repeatedly or pay anyone offering to remove the PIN.
- Wait out the lockout. WhatsApp's help centre explains that if you do not know the PIN, you have to wait a set period before you can register without it. The page shows how long.
- Meanwhile, warn your contacts on other channels. See how to warn your contacts.
- Once in, set your own PIN and add your email. See two-step verification.
"Recovery experts" are scammers. People on social media offering to unlock WhatsApp for a fee will take your money and may ask for your code, starting the takeover again. See fake recovery services.
If your number itself is not working
You cannot receive codes without your SIM. Call your mobile network to restore your number first. See WhatsApp and SIM swap.
Once you are back in, follow the after-recovery checklist. For more, see WhatsApp scams and how to protect your account.
Frequently asked questions
Why did the scammer set a PIN?
To stop you re-registering and taking your account back quickly, giving them more time to scam your contacts.
Does re-registering help if I cannot get past the PIN?
Yes. Verifying your number with the six-digit code logs out the scammer, even while you wait to get past the PIN.
Can WhatsApp support remove the PIN?
Contact support through the app or official website to explain. Never use unofficial 'recovery' services.
Sources
- How to recover a compromised account, WhatsApp Help Center
- About two-step verification, WhatsApp Help Center
- How to contact WhatsApp Support, WhatsApp Help Center
