About Lost or Stolen Phones and Accounts

Never share your registration code

Your WhatsApp registration (one-time) code is the single most sensitive piece of information for account access.
Do not share it with anyone — not friends, not family, not “support.” If someone asks for it, they’re trying to take over your account.

Immediate signs your WhatsApp account may be compromised

Pay attention to the first three signs — attackers often use compromised accounts to scam others.

• You see replies to messages you never sent.
• Friends complain about strange messages from your account.
• Messages are deleted in chats (you didn’t delete them).
• You receive a WhatsApp login verification code you didn’t request.
• Your status, stories, profile picture, name, or description changed unexpectedly.
• You’ve been added to groups you never joined.
• When you try to log in, WhatsApp says your account is in use on another device (very telling).

If you notice any of these, act immediately.

Two common ways attackers hijack WhatsApp accounts

1. Linked devices abuse — An attacker links an extra device to your account via the “Linked devices” feature. You may still be able to use WhatsApp, but the attacker can also read/send messages from that linked device.
2. Re-registering your number — An attacker registers your phone number on their device (often via SIM swap or convincing you to share the code). You lose access; attackers can control the account going forward (but cannot read previous encrypted device-only chat history).

What to do first: recover a compromised account

1. Open WhatsApp on your phone.
2. Tap Log back in > Continue.
3. Enter your full international phone number if prompted, then tap Next > OK.
4. Enter the 6‑digit code you receive by SMS or phone call.
   • When you re-register, all other devices logged into your WhatsApp account are automatically logged out.
5. If asked for a two-step verification PIN and you don’t know it:
   • If an email is linked, use the PIN-reset link sent to your email to reset instantly.
   • If no email is linked, you may need to wait 7 days for the PIN to be removed, then sign in again.
6. After signing back in, check Linked devices and log out any unknown devices (see next section).

If your device was lost or stolen

1. Call your mobile provider immediately and ask them to block the SIM (prevent SIM swap abuse).
2. Request and activate a replacement SIM with the same phone number.
3. Insert the new SIM into a device and follow the recovery steps above (receive the 6‑digit code, re-register).
4. Once you re-register, the lost/stolen device will be logged out automatically.

Important notes

• A WhatsApp account can be registered with only one phone number at a time.
• You cannot recover an account without a SIM (or another way WhatsApp can verify the same phone number).
• In some situations WhatsApp may automatically verify your number.

How to disconnect unauthorized web/desktop sessions

• Open WhatsApp → Settings → Linked devices (or the three-dot menu on Android → Linked devices).
• Tap each device listed and choose Log out for any you don’t recognize. This cuts off attackers using web/desktop.

Protect your account after recovery

Turn on these protections immediately:

• Two-step verification (set a PIN and link an email)
• App lock / device lock (fingerprint, face unlock, passcode)
• Chat lock (where available)
• Use your device security: strong screen lock, passkeys, or passwords

Also consider backing up chats to Google Drive or iCloud — that can help restore chat history when you re-register. (Backups themselves are not protected by WhatsApp end‑to‑end encryption unless you enable encrypted backups.)

What WhatsApp cannot do for you

• WhatsApp cannot deactivate your account on request — it cannot verify ownership of a phone number without proper steps.
• WhatsApp cannot locate your phone or remotely deactivate WhatsApp on another device.
• WhatsApp cannot tell you who accessed your account or the exact time/location of access.
• If you suspect repeated attempts, log out linked devices, change your device and WhatsApp PINs, and contact your mobile operator.

If your account was hacked: step-by-step checklist

1. Ensure the SIM for your WhatsApp number is in your phone.
2. Open WhatsApp:
   • If it opens normally: go to Settings → Linked devices, log out all unknown devices.
   • If it prompts for re-registration: enter your phone number, request the 6‑digit code, and enter it.
3. After re-registering, enter the two-step PIN if requested. If you don’t know it:
   • Use the email PIN-reset link if available, or
   • Wait the 7‑day timeout for PIN removal, then re-register.
4. Accept any offered restore from iCloud / Google Drive / local backup if you want your chat history back.
5. Re-enable two-step verification and security features.
6. Notify friends and family that your account was compromised — warn them not to trust any urgent money requests or unusual messages.

How criminals exploit you (common attack examples)

• Impersonation scams: Attackers pose as someone you know or “WhatsApp Support” and ask for codes or money. Always verify by calling the person on a known number.
• Verification-code scams: Attackers trick you into forwarding the SMS code or posting it in chat. WhatsApp never asks you to share the code in a message.

Final tips to stay safe

• Never forward or share your 6‑digit verification code.
• Link an email to your two-step verification PIN for faster recovery.
• Use a strong phone lock (PIN or biometric).
• Regularly check Linked devices and review active sessions.
• If in doubt, re-register your number immediately to kick out attackers.

---