If someone has taken control of your WhatsApp account, don’t panic. In most cases, you can recover the account by registering your phone number again using the six-digit verification code sent to your phone.
A compromised WhatsApp account can be serious. A scammer may impersonate you, send messages to your contacts, join conversations or groups, and attempt to trick friends and family into sending money.
The good news is that WhatsApp provides a recovery process that can remove the unauthorized user from your account.
Here’s how to recover a hacked WhatsApp account and secure it afterward.
How Do You Know Your WhatsApp Account Has Been Hacked?
Your WhatsApp account may have been compromised if you notice unusual activity such as:
- You have suddenly been logged out of WhatsApp.
- Someone tells you they received a strange message from your number.
- You receive a WhatsApp registration code you did not request.
- Your profile or account settings have changed without your permission.
- You notice an unfamiliar device under Linked Devices.
- WhatsApp tells you that your phone number has been registered on another device.
Receiving an unexpected verification code does not necessarily mean your account has already been hacked. It can mean that someone is attempting to register WhatsApp using your phone number. Never share the code with anyone.
How to Recover a Hacked WhatsApp Account
Step 1: Open WhatsApp and Log Back In
Open the official WhatsApp application on your phone.
If you have been logged out, select Log back in or the option to continue with your account.
Enter the phone number associated with your WhatsApp account.
If you’re in Kenya, make sure you enter your number using the correct international format, including +254, and do not add an extra leading zero.
For example, a Kenyan number normally entered locally as:
0712 XXX XXX
would be entered internationally as:
+254 712 XXX XXX
Step 2: Request the Six-Digit Verification Code
WhatsApp will send a six-digit registration code to your phone through SMS or, depending on the available verification options, a phone call.
Enter the code into WhatsApp.
According to WhatsApp, re-registering your phone number with the six-digit code automatically logs out other devices using your WhatsApp account. This is the most important step when someone else has taken over your account.
Never give this six-digit code to another person.
Someone claiming to be a WhatsApp employee, friend, family member or customer-care representative should never need you to send them your registration code.
What If the Hacker Enabled Two-Step Verification?
This is one of the most frustrating situations when recovering a WhatsApp account.
After entering your six-digit registration code, WhatsApp may ask for your two-step verification PIN or password.
If you know it, enter it.
If you don’t know it because someone else enabled two-step verification on your account, WhatsApp says you may need to wait seven days before you can try again without that PIN. Importantly, entering the six-digit SMS code still logs the other person out of the account.
Do not repeatedly guess the PIN.
What If You Are Not Receiving the WhatsApp Verification Code?
First, make sure your SIM card is active and can receive SMS messages and phone calls.
Also check that:
- You entered the correct phone number.
- You selected Kenya and the correct country code.
- Your phone has network coverage.
- You have an active SIM card for the number.
- You are using the latest version of WhatsApp.
- You haven’t repeatedly requested verification codes.
WhatsApp says users should wait for the verification timer before trying again. If SMS verification doesn’t work, you may be given an option to receive the code through a phone call.
Important: Don’t Keep Guessing Codes
Entering incorrect verification codes repeatedly can cause a temporary lockout.
If WhatsApp tells you to wait, wait for the specified period rather than trying random codes.
What If Your SIM Card Was Stolen or You Can’t Receive SMS?
This is different from simply losing access to WhatsApp.
WhatsApp requires you to be able to receive the verification code on the phone number associated with the account. WhatsApp states that an account generally cannot be recovered without access to the SIM card for that number.
If your Kenyan SIM card has been stolen, contact your mobile network operator and request a replacement SIM for your number.
Once you regain access to your number, you can attempt to register WhatsApp again.
Step 3: Check Your Linked Devices
After recovering your account, immediately check whether any unfamiliar computers or phones are connected to your WhatsApp.
On WhatsApp:
Settings → Linked Devices
Review the list carefully.
If you see a device you don’t recognize, select it and log it out.
WhatsApp recommends regularly checking linked devices and removing devices you don’t recognize.
Step 4: Warn Your Contacts
If someone had access to your account, tell your friends, family and important contacts that your WhatsApp account was compromised.
This is particularly important if you use WhatsApp for business.
A scammer could impersonate you and send messages such as:
“I’m stuck somewhere. Please send me money.”
Your contacts should know not to trust unusual requests sent during the period your account was compromised.
You can also post a WhatsApp Status warning people that your account has been recovered and that they should ignore suspicious messages sent previously.
WhatsApp itself recommends notifying contacts because a person using a compromised account could impersonate the account owner in chats and groups.
Step 5: Enable Two-Step Verification
Once you’ve recovered your account, add another layer of protection.
Open WhatsApp and go to:
Settings → Account → Two-step verification
Follow the instructions to enable it.
WhatsApp is currently transitioning its traditional six-digit two-step verification PIN system toward passwords for some users. If your account still uses a PIN, WhatsApp provides an option to manage or update the security setting.
Choose a security credential that other people cannot easily guess.
Add Your Email Address
Adding and verifying an email address can also help with account recovery.
WhatsApp says a verified email address can provide an additional recovery method when re-registering your phone number.
Make sure the email account itself is protected with a strong password and two-factor authentication.
Step 6: Protect Your SIM Card
WhatsApp security is closely connected to your phone number.
If someone obtains control of your SIM card, they may be able to receive verification codes intended for you.
For Kenyan users, be especially careful with suspicious calls or messages asking for personal information, SIM details or verification codes.
Never share your WhatsApp registration code with anyone.
If you suddenly lose mobile network service without explanation, contact your mobile network provider and investigate whether there is a problem with your SIM or mobile account.
Can a Hacker Read Your Old WhatsApp Messages?
Recovering your WhatsApp account does not automatically mean that another person can read all of your previous conversations.
WhatsApp says its messages are end-to-end encrypted and stored on your device. It also notes that someone who re-registers your WhatsApp account on another device cannot read your past conversations simply by registering the account.
However, if someone previously had physical access to your unlocked phone or had access to another linked device, the situation can be different.
That’s why checking Linked Devices and securing your phone is important.
Can You Recover Deleted WhatsApp Chats After a Hack?
Possibly, but it depends on whether you have a backup.
WhatsApp supports restoring chat history from backups associated with your Google Account or iCloud, depending on your device and backup configuration.
Before attempting major changes to your WhatsApp installation, check whether you have a recent backup available.
A backup can be particularly important if you have lost your phone or moved to another device.
What You Should Never Do After Your WhatsApp Is Hacked
Avoid these common mistakes:
Don’t pay someone claiming they can “hack your WhatsApp back”
You normally don’t need a third-party hacker or recovery service.
Follow WhatsApp’s official account-recovery process instead.
Don’t share your six-digit code
This is one of the biggest mistakes people make.
If somebody asks you to forward a WhatsApp verification code, don’t send it.
Don’t share your two-step verification password or PIN
Treat your WhatsApp security credentials as private.
Don’t click suspicious recovery links
Scammers may send fake WhatsApp support messages designed to steal your login information.
Use the official WhatsApp application and official WhatsApp support resources.
Don’t immediately delete the account
If you still have a chance to recover the account, follow the recovery process first.
WhatsApp specifically recommends attempting account recovery before reporting a compromised account because reporting can potentially result in the account being banned and loss of access or data.
How to Prevent Your WhatsApp Account From Being Hacked Again
After recovering your account, follow these security practices:
- Never share your WhatsApp registration code.
- Enable two-step verification.
- Add and verify your email address.
- Regularly check Linked Devices.
- Use the official WhatsApp application.
- Keep WhatsApp updated.
- Protect your phone with a screen lock.
- Don’t click suspicious links.
- Don’t install unofficial WhatsApp versions.
- Be suspicious of unexpected requests for money from contacts.
WhatsApp recommends using the official application and enabling additional security features such as two-step verification.
Frequently Asked Questions
How long does it take to recover a hacked WhatsApp account?
If you still control your phone number and can receive the six-digit verification code, recovery can be relatively quick. If another person has enabled two-step verification and you don’t know the PIN or password, WhatsApp says you may need to wait seven days before trying again without it.
Can I recover WhatsApp without my SIM card?
Generally, you need access to the phone number associated with the account so you can receive the verification code. WhatsApp says an account cannot be recovered without the SIM card for that number.
Will registering WhatsApp again log out the hacker?
Yes. WhatsApp says entering the six-digit registration code when re-registering your account automatically logs out other devices using the account.
Can someone hack WhatsApp with just my phone number?
Having your phone number alone does not give someone access to your WhatsApp account. However, scammers can attempt to trick you into giving them your verification code or other security information.
Never share your registration code.
What should I do if a hacker is asking my WhatsApp contacts for money?
Tell your contacts immediately that your account was compromised and that they should ignore payment requests or unusual messages from your number.
Final Takeaway
If your WhatsApp account has been hacked, don’t panic and don’t pay a stranger to recover it.
The most important step is to regain control of your phone number and re-register WhatsApp using the six-digit verification code. This automatically logs other devices out of the account.
After recovering the account, check your linked devices, enable additional security, add a verified email address and warn your contacts about the compromise.
For Kenyan WhatsApp users, protecting the phone number behind your account is just as important as protecting WhatsApp itself.
Editor’s Note: WhatsApp’s security and recovery procedures can change as new security features are introduced. Always check the official WhatsApp Help Center if an option or menu described above looks different on your device.
