Guide to Recovering a Stolen or Hacked WhatsApp Account

Few digital nightmares match the sudden dread of opening WhatsApp only to find you have been logged out, followed by a message stating your phone number is registered on another device. Account hijacking on instant messaging platforms has spiked exponentially as scammers turn to social engineering, malicious SMS codes, and SIM-swapping techniques to impersonate unsuspecting users. If you are currently facing this situation, acting fast is crucial to prevent further harm. Here is a comprehensive walkthrough on how to recover your stolen or hacked WhatsApp account, regain full access to your chats, and kick the intruder off your profile permanently.

Step 1: Re-Verify Your Number via SMS Immediately

The fastest way to kick an unauthorized user out of your profile is to log back in using your mobile number. WhatsApp only permits an active account on one mobile device at a time, meaning a successful re-verification instantly invalidates the scammer's session.

• Open the app on your phone and enter your mobile number.
• Request a verification code via SMS or voice call.
• Enter the 6-digit code as soon as you receive it.

Entering the fresh 6-digit SMS code will automatically sign out the hacker from your account on their device.

Step 2: What to Do If the Hacker Enabled a 2FA PIN

In many instances, once an intruder takes over, they immediately enable Two-Step Verification (2FA). When you attempt to log back in with your SMS code, the app will prompt you for a 6-digit PIN that you never created. If this happens, you are forced to wait out a security cooldown period.

You must wait 7 days before you can reset the 2FA PIN without the original code. While this pause feels frustrating, the intruder is already locked out the moment you verify your SMS code. They cannot read your messages or send chats during this 7-day holding window.

Step 3: Contact WhatsApp Support for Help

If automated re-verification fails or your SIM card has been compromised through a SIM swap attack, you must escalate the issue directly to support teams.

• Draft an email to [email protected].
• Use the exact subject line: "Stolen/Lost: Please deactivate my account".
• Include your full phone number in complete international format (e.g., +1-XXX-XXX-XXXX).
• Explain clearly that your profile was taken over against your consent.

Securing Your Profile Against Future Hijacking

Once you successfully complete the process to recover your stolen or hacked WhatsApp account, taking proactive defense measures is essential. Never share SMS registration codes with anyone, even if the message appears to come from a trusted friend whose account may also be compromised. Turn on Two-Step Verification within your settings immediately, and assign a personal email address for emergency account recovery resets.

Have you ever dealt with a compromised messaging profile or scam attempt? Share your experiences and security tips in the comments below!