Texts and calls

The Snapchat Support Text Scam, October 2026

Updated 18 October 2026

It is 11pm on a Tuesday and you get a text that looks like it is from Snapchat support, telling you someone tried to log in to your account and you need to verify a one time code or your account will be locked. You tap. You read the next page. You type a six digit code into a webpage. The page reloads. Your real Snapchat, the one with the streaks and the kids' group chat, is now being run by someone in a different country, and they are messaging your contacts to ask for money within twenty minutes. That is the whole scam, and the reason it works is that the message looks exactly like a real Snapchat security alert, including the brand colour and the bit about account safety. Here is the version hitting phones in October 2026, what the link is actually doing, and what to do in the next ten minutes if you typed anything in.

What the Snapchat support text actually says in October 2026

Reports on Reddit's r/Snapchat and on X through the first half of October 2026 describe the same message landing on US and UK phones, usually from a short code or a random mobile number. The wording varies but the bones are identical. There is a claim that someone tried to log in to your account from a new device, often naming a city, and a deadline, usually one hour, after which the account will be locked. There is a link that looks like it goes to snap.com or snapchat.com but actually goes to a subdomain on a free host or a freshly registered domain. There is a request to confirm a six digit code. The whole message is built to copy Snapchat's own security email template, which is a documented problem the company has been dealing with for two years and which several creators have flagged publicly.

Two real-looking variants are circulating at the same time. The first is a plain SMS pretending to be Snapchat Support, asking you to tap a link to "verify your account" and giving you a code to enter. The second is a DM inside a hacked account, sent to that account's contacts, asking the recipient to vote for a team in a "school project" by entering their phone number and a code. Both end at the same place: a credential capture page. The first catches people who have a real Snapchat account and a real fear of losing it. The second catches people who actually know the person messaging them, which is the whole point.

If you got a message that fits any of that, the short version is: it is not from Snapchat. Snapchat does not text you a six digit code out of nowhere, and it does not put a one hour countdown on your account. The company has said so in its own help centre, and the help centre article is the only thing you should trust on this. Real Snapchat security alerts go to the email you signed up with, not to your phone number, and they do not ask you to type a code into a webpage. Anything that asks you to do that is somebody else.

What the link really does when you tap it

The link in the October 2026 version usually opens a page that looks like a Snapchat login screen, or a small form with one box for a username and one box for a code. Both are designed to harvest two things. The first is your Snapchat username and password, if you type them in. The second is the six digit login code that Snapchat texts to your real phone number when somebody tries to sign in to your account. If you enter both, the operator on the other end has roughly thirty seconds to log in as you before the code expires, which is the reason the message pressures you to act fast. That is the whole trick. The "one hour to lock the account" line is theatre. The real clock is the two factor code.

Once they are in, the script is quick and predictable. The attacker changes the email on the account to one they control. The attacker changes the recovery phone number. The attacker turns on two-factor authentication so you cannot get back in. The attacker then opens the inbox of the account, if the account is connected to Gmail, and pulls out any saved password reset emails for other services. After that, the attacker moves to the DMs, and starts messaging the account's contacts with the "school project vote for me" or "help me get a giveaway" routine, which is the next step of the same operation. The goal at that point is not your Snapchat. It is your contacts' money, sent through Cash App, Venmo, Apple Pay, or Zelle, on the strength of a real conversation with a real friend.

One reason the page looks convincing is that the scammers reuse real Snapchat styling, including the ghost logo and the yellow-on-black palette, and they often put the page on a domain with "snap" or "snapchat" in it. Look at the address bar. The real login is at accounts.snapchat.com and that is the only address you should type yourself. Anything else, even if it starts with the word snap, is somebody's landing page. Type the address yourself if you need to log in, do not follow a link from a text.

If you tapped, if you typed, if you lost the account: the next ten minutes

You tapped the link. You typed your password. Maybe you typed the code. Do these things now, in this order. First, if you can still get into your Snapchat, go to Settings, then Account, then Password, and change the password to something you have not used anywhere else. A password manager is the right tool for this. Second, in the same place, turn on Two-Factor Authentication, and choose an authenticator app instead of SMS if your phone supports it. Authenticator apps are not perfect, but they are not vulnerable to the same kind of code-theft this scam depends on. Third, while you are still in Settings, open Sessions, or Devices, depending on your version, and end every session that is not the phone in your hand. That kicks the attacker out. Fourth, check the email address on the account. If it is not the one you remember, change it back. If Snapchat won't let you, that is a sign the attacker has changed it and you need to move to the recovery flow below.

If you cannot get back in because the password no longer works, go to accounts.snapchat.com and use the "I can't access my account" or "I think my account was hacked" flow, which has been rebuilt a few times and is currently the standard recovery path. You will need to be able to receive the email at the address currently on the account, which is why the attacker changes it first. If the email is not yours, Snapchat Support can sometimes verify identity through other signals, but the process is slow and there is no promise of a fast resolution. Be ready for that. Do not pay anyone who offers to "recover" your account for a fee. The only legitimate recovery is through Snapchat itself.

If you are reading this because a friend messaged you from their real account asking for money, do not send it. Open a separate channel, call them, text them from a number you have had for a year, whatever. The fact that it is the same username and the same photo is not proof the person typing is your friend. It is proof the person's account has been taken over. The same rule applies to anyone messaging you about a school project vote, a giveaway, a crypto promotion, a "creator" looking for investors, or a job offer that needs your phone number to start. All of these are the second-stage script of the same operation. Report the message in the app, block the account, and tell the real person through some other means.

How to tell a real Snapchat security alert from the fake one

Snapchat's own documentation is the only source you should trust on what the company will and will not send. Three rules hold. Real Snapchat security alerts go to the email address on the account, not to your phone number. Real alerts give you information and a path to review your account, not a countdown. Real alerts do not ask you to type a six digit code into a webpage, because the code is the one Snapchat sent you, not the one you send back. The fake message breaks all three. It comes by SMS, often to a number that has never been associated with the account, it pressures you with a deadline, and it wants a code.

There is one more tell worth knowing about. The real Snapchat login URL is accounts.snapchat.com. That is the only place you should type your password. If a text sends you to snap-login.com, snap-verify.com, snapchat-security.app, or anything that ends in a country code TLD you have never heard of, the page is fake. The ghost logo does not make a page real. The yellow background does not make a page real. The fact that it looks like the app does not make it real. The address bar is the only thing that makes a page real, and the only address you should trust on a login is the one you typed yourself.

Why the school project DM is the bit that costs people money

By the time the attacker has control of the account, the account is no longer the target. The contacts are. The script usually starts with something like "hey can you vote for me in my school project" or "I'm entered in a giveaway, can you send me $5 to boost my entry, I'll send it back tomorrow". The amounts are small, which is the point. A friend who would not fall for a $2,000 invoice will absolutely send $20 to a friend they have been DMing for years. The attacker sends the same message to a hundred contacts and waits. Some send money. Some don't. The attacker also runs the same trick from the email address pulled from the account, which is why the second stage of this kind of breach often looks like a wave of hacked Gmails sending the same message to the same address book.

The reason it is worth saying this out loud is that the people who get scammed at this stage did nothing wrong. They did not tap a link. They did not type a code. They talked to a friend, believed the friend, and sent money. The only defence is to break the channel. If you get any money request from anyone, on any platform, by any method, and the request is even slightly off, confirm through a method that is not the one the message came on. A phone call, on a number you already had, to a person you already know, is the cheap and correct move. The caller ID might be spoofed. The username might be hijacked. The voice of someone you have known for ten years is still the person.

Reporting the message and what to do with the phone number

Forward the text to 7726 (which spells SPAM) in the US, or to 7726 in the UK, then delete it. Both carriers accept the report. Snapchat also has a reporting flow inside the app for messages that pretend to be from the company, which routes to the trust and safety team. None of this will get your money back if you sent any, but the reports do feed into the patterns the platforms use to take down the next round of domains. The October 2026 version of this scam uses a pool of short-lived URLs that get reported and burned within a day or two, then replaced, which is why the link you got will probably be dead by the time you read this. That is not a reason to relax. It is a reason to know the pattern, because the pattern recycles.

One last thing. If you entered your phone number into the fake page, treat the number as exposed. Expect a wave of smishing over the next few weeks, themed around delivery, tolls, banks, and jobs. Do not tap any of those either, for the same reason. The number is now on a list, the list will be sold, and the next message will look like a different kind of urgent thing. The discipline is the same. Stop. Read the address bar. Do not type codes into webpages. If a real person needs something, they will call.

Quick answers

Will Snapchat ever text me a six digit code out of nowhere?

No. Snapchat sends login codes only after you have asked for one, by trying to log in yourself. If a code arrives unprompted, somebody else is trying to sign in as you, and you should change your password rather than share the code with anyone.

I typed the code into the fake page. Can I still get my account back?

Yes, often, if you move within minutes. Change the password from a device that is still logged in, end every other session in Settings, turn on an authenticator app, and check that the email on the account is still yours. If you are locked out, use the hacked-account recovery flow at accounts.snapchat.com.

A friend messaged me from their real account asking for money. Is it really them?

Treat it as not them until proven otherwise. Hacked accounts send the same request to every contact. Call the friend on a number you already had, or message them on a different platform, before sending anything. The same username and the same photo are not proof.

Is the link in the text safe to open if I do not type anything?

No. Opening the link can still load a credential-harvesting page and can fingerprint your device. Do not open it. Forward the message to 7726 and delete it, then type accounts.snapchat.com yourself if you want to check your account.

Will Snapchat support message me on Telegram or Instagram?

No. Snapchat does not run support over Telegram, Instagram, or any third-party chat. Anyone claiming to be Snapchat support on a different platform is running a recovery scam, often after the first scam has already happened, and they will ask for a fee to "verify" your account. Do not pay.

This is general safety information, not legal advice. Scams change. If you need an official desk: FTC ReportFraud or IC3.