Lesson 1The verification code trick
The single most common way people lose control of their WhatsApp account isn't hacking in the movie sense — it's being tricked into handing over a verification code.
Here's exactly how it works: someone (often pretending to be a friend, a business, or even WhatsApp itself) contacts you and says something urgent is happening — “I accidentally sent my verification code to your number, can you forward it to me?” or “Your account will be deactivated, verify now.” A 6-digit code arrives on your phone by SMS. If you share it, you've just handed over full access to your account — because that code is the only thing standing between anyone and your WhatsApp.
The one rule
WhatsApp verification codes are never meant to be shared with anyone, for any reason, ever — not with “customer support”, not with a “friend” in a hurry, not with anyone. Legitimate services never ask you to forward a code to them.
The same logic applies to Facebook, Instagram and other social accounts — a login code sent to you is meant for you alone to type in, never to send to someone else.
Real-life example
Kofi received a message from what looked like his cousin's WhatsApp number: “Hey, I'm locked out, can you help me? WhatsApp sent a code to your phone by mistake, please send it to me quickly.” Kofi almost forwarded it — until he remembered the rule and instead called his cousin directly on a normal phone call. It turned out his cousin's account had already been taken over by a scammer, who was now running the same trick on all his cousin's other contacts.