Get Help

My WhatsApp Was Hacked — What Do I Do?

You've noticed messages you didn't send, you were logged out unexpectedly, or someone told you they received a strange message from your account. This can happen if someone obtained your verification code or gained access through WhatsApp Web.

What to do now

If your WhatsApp account may have been compromised, secure the account through the official WhatsApp recovery process, check linked devices, protect your phone number and warn contacts if messages were sent from your account.

Do this now

Open WhatsApp and check Settings > Linked Devices. Remove any device you don't recognise.
If you can't access your account, re-register your phone number in WhatsApp. Successfully registering your number again logs out other devices using the account.
Never share the six-digit verification code you receive by SMS with anyone, even someone claiming to be WhatsApp support.

Then do this

Enable Two-Step Verification in WhatsApp Settings > Account.
Warn close contacts that your account was compromised, in case they received scam messages from it.
Review your phone for anything else unusual, such as unfamiliar apps.

Check these things

Are there linked devices you don't recognise?
Did you recently receive and share a WhatsApp verification code?
Are contacts reporting strange messages from you?

Don't do this

Don't share your verification code with anyone for any reason.
Don't ignore repeated 'account taken over' notifications.

When should I get help?

Contact WhatsApp support through the official app if you remain locked out after reinstalling.
Warn your bank if the compromised account was used to request money from contacts.

Related help

Your situation may involve more than one issue. These related guides can help you work through the next step.

I Think I Was SIM Swapped — What Should I Do?If your phone suddenly loses mobile service without an obvious reason and you suspect a SIM swap, contact your mobile provider immediately and secure important accounts using trusted recovery methods.I Entered My Password on a Suspicious Website — What Now?If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.Someone Has My Personal Information — What Should I Do?If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.

Loading Cyber Conduct…

Please wait while the page loads.