WhatsApp Hacked? How to Get Your Account Back
WhatsApp accounts are usually stolen through a simple trick: someone gets you to share the six-digit verification code sent by SMS. With it, they register your number on their phone and you're logged out. Here's how to recover.
How WhatsApp accounts get stolen
- A message from a "friend" (whose account was already stolen) says they sent a code to you by mistake and asks you to forward it.
- A caller pretends to be from a telecom company, bank or delivery service and asks for a code.
- A fake prize or survey asks you to "verify" by sharing a code.
The code is actually WhatsApp's registration code for your number.
How to recover your account
- Open WhatsApp on your phone and sign in with your phone number.
- Enter the 6-digit SMS code you receive. Don't share it with anyone.
- Once you verify, the other person is logged out automatically.
If asked for a two-step verification PIN
If the hacker set a two-step PIN, you'll be asked for it. You can't get in until:
- You receive a reset link on the email address linked to the account (if one was added), or
- You wait 7 days, after which you can register without the PIN.
Even without the PIN, the hacker loses access as soon as you verify your number with the SMS code.
Tell your contacts
Warn friends and family through other channels that your WhatsApp was stolen and to ignore requests for money or codes.
Contact WhatsApp support
Email WhatsApp support through the app's Help section or the official support page, stating "Lost/Stolen: Please deactivate my account" with your phone number in international format.
Protect your account
- Turn on Two-step verification: Settings → Account → Two-step verification. Add an email for PIN recovery.
- Consider adding a passkey if offered.
- Check Linked devices regularly and log out unknown ones.
- Set groups to "My contacts" in privacy settings to avoid scam groups.
- Protect your SIM from SIM swap scams.
Check for WhatsApp Web sessions
Someone with brief access to your phone can link WhatsApp Web to their computer. In Settings → Linked devices, log out of any device you don't recognise.
Other WhatsApp scams to watch for
- "Hi Mum / Hi Dad" scam: a message from an unknown number claiming to be your child with a new phone who urgently needs money. Always call the known number.
- Fake job and investment groups: you're added to groups offering easy earnings or trading tips. See online job scams.
- Fake prize and lottery messages using well-known brand names.
- Voicemail PIN hijacking: scammers request a voice call verification and access your voicemail if it uses a default PIN. Set a strong voicemail PIN or disable voicemail.
- Impersonation: scammers copy a friend's profile photo and name onto a new number.
Tips for group admins
- Set groups so only admins can change group settings and add members.
- Use approval for new members in community groups.
- Remove unknown numbers quickly and warn members about scam messages.
Reporting
Long-press a message or open a chat's info to Report and block scammers. Reporting helps WhatsApp ban scam accounts. For financial losses, contact your bank immediately and file a report with the relevant cybercrime authority, keeping screenshots and phone numbers.
Frequently asked questions
Can the hacker read my old chats?
Chats are stored on your phone. The hacker generally can't see old messages unless they restored a backup, but they can see new messages while they have access.
Why am I not receiving the SMS code?
Check signal, wait for the timer, and choose "Call me" instead.
Keep reading
What Is a VPN and Do You Actually Need One?
A plain-English explanation of VPNs: what they protect, what they don't, when they're useful, and how to choose a trustworthy one.
SIM Swap Scams: How Criminals Steal Your Phone Number
Learn how SIM swap fraud works, the warning signs, and how to protect your bank and accounts that rely on SMS codes.
10 Signs Your Account Has Been Hacked (and What to Do)
Recognise the warning signs that your email, social media or other accounts are compromised, and take back control quickly.