Hi 👋 If WhatsApp just logged you out with a message about your number being registered on a new device, or friends are asking why “you” asked them for money, here's the good news first: WhatsApp is one of the most recoverable accounts there is. You don't need a support ticket or an ID check. You need your phone number and one SMS code, and the person who took it is kicked out automatically.
The catch is that the obvious moves, like changing a password or reporting the account, either don't help or can make things worse. Here's the order that works.
Which situation are you in?
| Go to | What you see | What it usually means |
|---|---|---|
| Part 1 | You're logged out. WhatsApp says “Your phone number was registered with WhatsApp on a new device.” | Someone got your 6-digit code and registered your number on their phone. |
| Part 2 | You still have WhatsApp, but messages are being read or sent that you didn't send. | Someone has your account open on a linked device (WhatsApp Web or Desktop). |
| Part 3 | Your phone is lost or stolen, or your SIM suddenly stopped working. | The phone, or your number itself (a SIM swap), is in someone else's hands. |
How it usually happens
Almost every WhatsApp takeover comes down to one thing: someone got the 6-digit registration code that WhatsApp sends to your number. The common ways they get it:
- The “sent you my code by mistake” message. A friend's account (already hacked) messages you: “Sorry, I sent a code to your number by accident, can you forward it?” That code is yours, and it hands over your account. WhatsApp's own rule is blunt: never share your registration code with anyone, “not even friends or family.”
- Fake support or fake verification. A message or call claiming to be WhatsApp, your bank, or a delivery company asking you to “confirm” a code.
- Your voicemail. WhatsApp can deliver the code by voice call. If your voicemail still has the default PIN, someone can request the call while your phone is off and listen to the code. That's why WhatsApp recommends a hard-to-guess voicemail password.
- A fake WhatsApp Web page or QR code. Scanning someone else's QR code links their browser to your account.
Part 1 — Take your account back
This works as long as you still have the SIM card for your number. Do it from your own phone, and do it now: the longer the other person is in, the more people they can scam in your name.
Don't report the account yet
It feels like the responsible thing to do, but WhatsApp warns that if you report the compromised account you're trying to recover, it might ban it for violating its Terms of Service, and you could lose the account and its data for good. Recover first, report afterwards (report the scammer's own number, not yours).
Log back in with your SMS code
Open WhatsApp on your phone and tap Log back in > Continue. If asked, enter your full international phone number and tap Next > Ok. Then enter the 6-digit code that arrives by SMS or phone call.
That's the step that actually removes them. When you re-register with the code, every device logged into your account is logged out automatically, including theirs. And this time, don't share the code with anyone.
Asked for a PIN or password you never set? Don't panic
Attackers sometimes turn on two-step verification with their own PIN or password to lock you out. The important part: according to WhatsApp, whoever is using your account is logged out the moment you enter the SMS code, whether or not you know the PIN. They're already out. You just can't fully log in yet.
- First try Verify another way: WhatsApp can verify you by email, SMS or voice call instead.
- If that doesn't work, you'll have to wait. WhatsApp's help pages describe a wait of about 7 days, after which a Reset account option unlocks (Verify another way > See more > Reset account).
- Know what a reset costs before you tap it. It can't be undone. If you last logged in less than 30 days ago, you lose messages received since then, but keep your profile. After more than 30 days, your messages and profile are deleted.
Warn your contacts and groups
While they had your account, the attacker could message anyone as you, and the usual play is asking your friends for money or for their codes. Post a short note in your status and your busiest groups, and tell the closest people directly: “My WhatsApp was hacked yesterday. Ignore any requests for money or codes from me.”
Check linked devices, then lock it down
Once you're back in, review your linked devices and turn on the protections in Part 4. Do it today, while you still remember how it felt.
Part 2 — You still have WhatsApp, but someone else is in
If your WhatsApp works normally on your phone but you see messages you didn't send or chats marked as read, someone may have your account open on a linked device: WhatsApp Web, Desktop, or a second phone or tablet.
- Open Linked Devices in WhatsApp (Android: the ⋮ menu; iPhone: Settings).
- Tap any device you don't recognize, then Log Out. If in doubt, log them all out and link your own again afterwards.
- When you use WhatsApp Web on a shared or public computer, untick Stay logged in on this browser before scanning the QR code, so the session ends when the tab closes.
Then work through Part 4: an unknown linked device means someone had either your unlocked phone or a QR code you scanned.
Part 3 — Lost or stolen phone, or a dead SIM
Your WhatsApp account lives on your phone number, not on the phone. WhatsApp is clear that it's not possible to recover an account without a SIM card with the same number. So the number comes first:
- Call your mobile provider as soon as possible and ask them to block your SIM card.
- Ask for a new SIM with the same number, then activate it and put it in a phone.
- Open WhatsApp and register your number again (the same SMS code as in Part 1). The lost or stolen phone is logged out automatically.
If your SIM stopped working out of nowhere, while your phone is still in your hand, tell your provider you suspect a SIM swap: someone may have convinced them to move your number to their SIM. That puts every account that texts you codes at risk, not just WhatsApp, so after WhatsApp, go through the first-hour account checklist for your email and bank.
Many guides still tell you to email WhatsApp to “deactivate” your account. WhatsApp now says it can't deactivate your account for you, because it can't verify that you own the number, and there's no remote deactivation from another device. Getting your number back is the way.
Part 4 — Lock it so this can't happen again
WhatsApp's own security pages make one thing clear: these features protect an account you still have, and turning them on can't remove someone who's already in. That's why they come after Part 1. Ten minutes, once:
- Turn on two-step verification (Settings > Account > Two-step verification). WhatsApp is moving from a 6-digit PIN to a password. Use a real one from your password manager, not your birthday. With this on, a stolen SMS code alone is no longer enough to take your account.
- Add your email address to the account. It gives you a way to verify yourself without SMS, and it's what saves you from the 7-day wait if you ever forget your password.
- Set up a passkey, so logging in uses your phone's fingerprint, face or screen lock.
- Change your voicemail PIN from the default. It closes the voice-call trick above.
- Turn on app lock, and lock your most sensitive chats with chat lock, so someone holding your unlocked phone can't read everything.
- Check Linked Devices once a month. It takes five seconds.
- Burn one rule into memory: a WhatsApp code is never for anyone else. Not a friend, not “WhatsApp support,” not anyone.
Mistakes people make under panic
- Changing the password and thinking that kicks them out. WhatsApp says it directly: changing your password won't remove someone else from your account. Only re-registering with your SMS code does.
- Reporting your own account first. It can get the account banned before you get it back. Recover, then report.
- Paying a “recovery expert.” Anyone who DMs you offering to recover your WhatsApp for a fee is running the next scam. The only way back is the SMS code to your own number, which no outsider can do for you.
- Waiting until tomorrow. Every hour they're in is an hour they're asking your friends for money as you.
- Forgetting the rest of your accounts. If they got a code through a SIM swap or your voicemail, they can get other codes too. Check your email and bank next with the first-hour checklist.
The WhatsApp recovery checklist
- Did not report my own account before recovering it
- Logged back in with the 6-digit SMS code (everyone else is logged out)
- Asked for an unknown PIN? Tried “Verify another way”, or noted the date to retry in about 7 days
- Warned contacts and groups: no money or codes to anyone “from me”
- Logged out every linked device I don't recognize
- Turned on two-step verification with a strong password
- Added my email address, and set up a passkey
- Changed my voicemail PIN from the default
- Lost phone or dead SIM? Called my provider and got my number back first
Don't report it, log back in with your SMS code, warn your contacts, log out strange linked devices, then turn on two-step verification and add your email. Your number is the key, so guard the code that comes to it.
Quick answers
Can the hacker read my old chats?
Not your past conversations. WhatsApp is end-to-end encrypted and messages are stored on your device, so someone who registers your account on a new phone can't read your history. They can see what arrives while they're logged in, which is why acting fast matters.
Can WhatsApp tell me who did it, or from where?
No. WhatsApp says it can't provide information about who accessed your account, or when and where it was accessed.
Will I get my chat history back?
If you had a chat backup on Google Account (Android) or iCloud (iPhone), you may be able to restore it when you log back in. Without a backup, WhatsApp can't restore old messages for you.
Can WhatsApp support deactivate or recover it for me?
No. WhatsApp can't deactivate accounts on request, and recovery always goes through the SMS code to your number. You can still contact WhatsApp from Settings > Help in the app, or at whatsapp.com/contact. Be suspicious of anyone else claiming to be WhatsApp support.
Sources: every step above is checked against WhatsApp's Help Center: recovering a compromised account, lost or stolen devices, two-step verification, forgotten two-step password, linked devices and account security tips. Last checked November 2026.