Spain warning: One phone call about a parcel could cost you your WhatsApp

A quick call about an ‘urgent delivery’ might not sound like a big deal – but Spanish police say it’s now one of the easiest ways for scammers to take over your WhatsApp account. All it takes is a six-digit code sent to your phone.

It usually starts the same way. Your phone rings. Someone on the other end says they’re a delivery driver. There’s a parcel for you, something’s gone wrong, or they just need to confirm a few details before dropping it off. Nothing unusual so far.

Then they mention a code.

They say they’re going to send you a number by SMS and ask you to read it back so they can ‘complete the delivery’. It sounds routine. People do it without thinking. That’s where things go wrong.

It’s not a delivery – it’s your WhatsApp

The message you receive isn’t linked to any parcel. It’s the WhatsApp verification code – the one used to activate your account on a new phone.

The moment you share it, your account is no longer yours. There’s no delay, no warning. You’re simply logged out while someone else logs in.

What happens next catches people off guard

Once inside, scammers don’t sit around. They go straight to your contacts.

Messages start going out – usually something casual at first, just enough to sound like you. Then comes the ask. Money, a quick transfer, sometimes something more personal.

Because it’s your number, people trust it. That’s the whole point. In some cases, several contacts are approached within minutes.

By the time you realise what’s happened, the damage may already be spreading.

The detail most people miss

This scam doesn’t rely on anything technical. It relies on a habit.

People are used to receiving codes. Banks send them. Apps send them. Delivery services sometimes send notifications too. So when someone asks for one, it doesn’t immediately feel suspicious.

But this one rule hasn’t changed: that WhatsApp code is never meant to be shared. Not with a courier. Not with customer service. Not with anyone calling you out of the blue.

Why it works so easily

There’s always a sense of urgency in the call. The parcel needs to be delivered now. The driver is waiting. There’s a problem that needs fixing quickly.

That pressure matters. It pushes people to react instead of pause. And because the situation feels familiar, there’s no obvious red flag at first.

That combination – something ordinary mixed with a bit of urgency – is exactly what makes it effective.

If it happens, act quickly

If you’ve already shared the code or suddenly find yourself logged out of WhatsApp, don’t wait.

Try logging back in using your number. WhatsApp will send a new code, and in many cases, that’s enough to take back control.

At the same time, it’s worth letting your contacts know as soon as possible. A quick message warning them not to respond can stop things from getting worse.

Spain’s cybersecurity institute, INCIBE, also advises reporting the number used and keeping any messages or call details.

If you’re stuck or unsure what to do next, their helpline (017) is available every day.

A scam that depends on a split second

There’s no malware involved here. No complicated setup. Just a phone call, a believable story, and a moment where you don’t think twice.

That’s all it takes. And right now, that’s exactly what scammers are counting on.