How to Know If Your WhatsApp Is Hacked & Secure It (2026)

Your friend sends you a strange message: "Please, I need ₦50,000 urgently, I'll return it tomorrow." It's from your number, but you never sent it. Or you open WhatsApp and see "Your phone number is no longer registered on this phone." Both are classic signs of a hacked WhatsApp account, and it happens to thousands of people every week in Nigeria, the US, Canada and everywhere else.

In this guide you'll learn how to know if your WhatsApp is hacked, how hackers really get in (no movie-style hacking, just tricks), what to do in the first 10 minutes if it happens to you, and the hidden WhatsApp settings that make your account almost impossible to steal, including the new security features WhatsApp added in August 2026.

How Hackers Really Take Over WhatsApp Accounts

Most WhatsApp "hacks" aren't clever code. They're tricks that get you to hand over the key yourself. Here are the methods used most often:

1. The "I sent you a code by mistake" trick

The scammer starts setting up your number on their phone. WhatsApp sends you a 6-digit verification code by SMS. Then a message arrives, often from a friend's account that was already hacked, saying they sent you a code by mistake and asking you to forward it. Once you share it, they own your account.

2. Fake offers, links and "verification" calls

Fact-checkers at Dubawa have described how scammers targeting Nigerians call from unknown numbers with tempting offers, such as club memberships, jobs, giveaways or classes, then ask for "the code we just sent" or send a link to click. That "code" is your WhatsApp login code.

3. The call-forwarding trap

This is a nastier version. The attacker gets you to dial a code or approve a request that forwards your calls to their number. Then they register your WhatsApp and choose to receive the code by voice call. The call goes to them, not to you, so you never see the code.

4. Linked devices (WhatsApp Web) you forgot about

If someone gets your phone for a minute, they can scan a QR code and link WhatsApp Web or a laptop to your account. From then on they can quietly read your chats without logging you out.

5. SIM swap

A criminal convinces your network to move your number to a new SIM. Your phone loses signal, and they receive your WhatsApp codes (and bank OTPs too).

6. Unofficial "mod" WhatsApp apps

Modified WhatsApp apps from random websites aren't checked by WhatsApp. They can expose your messages and can get your number banned. Stick to the official app from Google Play.

10 Signs Your WhatsApp Is Hacked

1. You're logged out and asked to verify your number again, but you didn't do anything.
2. Friends say you sent them strange messages, links or money requests.
3. You see an unknown laptop, browser or phone under Linked devices.
4. Messages you never sent appear in your chats.
5. Some messages or chats have been deleted.
6. Your profile photo, name or About text has changed.
7. You've been added to groups you never joined.
8. You get WhatsApp login codes you didn't ask for.
9. WhatsApp asks for a two-step verification PIN you never set. The hacker set it to lock you out.
10. You get unexpected emails about resetting your two-step verification.

The 60-Second WhatsApp Security Check

Do this now, even if nothing seems wrong:

What to Do If Your WhatsApp Is Hacked (Step by Step)

1. Get your SIM ready. Put the SIM for your WhatsApp number in your phone and make sure it has signal.
2. Re-register your number. Open WhatsApp (reinstall it if needed), enter your number and type the 6-digit code you receive. Logging back in kicks the hacker out of your account on their phone.
3. If it asks for a PIN you never set: the hacker set up two-step verification. Tap Forgot PIN. If an email is linked, you can reset it from the link WhatsApp sends. If not, you have to wait 7 days before you can log in without the PIN. The hacker is also locked out during this time.
4. Log out all linked devices as soon as you're back in.
5. Turn on a passkey and two-step verification right away (see below).
6. Warn your contacts. Call close friends and family. Post a status or update your About: "My WhatsApp was hacked. Don't send money to anyone using my name."
7. Still locked out? Email [email protected] with the subject "Lost/Stolen: Please deactivate my account" and your number in full international format (for example, +234...).
8. Lost money? Contact your bank immediately to flag the receiving account, and report it to the police.

12 Hidden WhatsApp Settings That Make Your Account Hack-Proof

1. Create a passkey

Settings > Account > Passkeys. A passkey lets you log in with your fingerprint, face or screen lock instead of a code. Even if someone tricks you into sharing an SMS code, the passkey protects you. WhatsApp says more than 1 billion people now use passkeys, and since August 2026 you can add more than one passkey, which is handy if you use both Android and iPhone.

2. Turn on two-step verification (now with a real password)

Settings > Account > Two-step verification. This adds a secret that WhatsApp asks for when your number is registered on a new phone. In August 2026, WhatsApp announced a stronger version that replaces the 6-digit PIN with a longer password using letters, numbers and symbols. Use it if your app shows the option. It protects you even if a scammer gets your OTP.

3. Add a recovery email

Settings > Account > Email address. If a hacker ever locks you out with a PIN, this email lets you reset it without waiting 7 days.

4. Check linked devices every week

⋮ > Linked devices. If you see a browser or computer you don't use, tap it and choose Log out.

5. Lock WhatsApp with your fingerprint

Settings > Privacy > App lock (called Fingerprint lock on some versions). Now someone who picks up your unlocked phone still can't open WhatsApp.

6. Lock your most private chats

Long-press a chat and choose Lock chat. Locked chats move to a hidden folder that needs your fingerprint or a secret code.

7. Silence unknown callers

Settings > Privacy > Calls > Silence unknown callers. Calls from numbers not in your contacts won't ring, so scam calls can't pressure you. On Android, WhatsApp now also shows more about unknown callers, such as whether the number is from another country and whether you share any groups.

8. Stop strangers adding you to groups

Settings > Privacy > Groups and choose My contacts. Lots of scams start in random "investment" and "giveaway" groups.

9. Hide your profile photo from strangers

Settings > Privacy > Profile photo > My contacts. Scammers copy profile pictures to pretend to be you.

10. Protect your IP address in calls

Settings > Privacy > Advanced > Protect IP address in calls. Calls are routed through WhatsApp's servers, so people can't easily work out your location from a call.

11. Check for secret call forwarding

Dial *#21# to see whether call forwarding is on. On most GSM networks, including MTN, Airtel, Glo and 9mobile, ##002# cancels all call forwarding. If you're not sure, call your network.

12. Add a money disclaimer to your About

Write something like: "I will never ask for money on WhatsApp. Call me first." If your account is ever stolen, this one line can save your friends.

Golden Rules to Avoid WhatsApp Scams

• Never share your 6-digit WhatsApp code with anyone, including friends, "WhatsApp support", banks or giveaway agents. WhatsApp will never ask for it.
• Call before you send money. If a friend asks for money on WhatsApp, phone them on their normal number first.
• Don't dial codes strangers give you. Some codes switch on call forwarding.
• Don't click links from unknown numbers promising jobs, data, giveaways or "verification".
• Keep WhatsApp and Android updated from Google Play.
• Never leave your phone unlocked around people you don't trust.

FAQs

Can someone hack my WhatsApp without my code?

It's much harder. Without your code they need physical access to your phone (to link WhatsApp Web), a SIM swap, or a call-forwarding trick. A passkey and two-step verification block most of these.

How do I know if someone is reading my WhatsApp messages?

Open ⋮ > Linked devices. Any device listed there can read your messages. Log out of anything you don't recognise.

Will the hacker see my old messages?

When someone registers your number on a new phone, they don't get your old chats unless they also have your backup. A linked device, however, can see your messages while it's connected.

How long does WhatsApp take to unlock a hacked account?

If the hacker set a two-step PIN and you have no recovery email, you must wait 7 days. With a recovery email you can reset it straight away.

Does WhatsApp ever ask for my code or PIN?

No. WhatsApp will never message or call you asking for your verification code or PIN.

What is the difference between a passkey and two-step verification?

A passkey replaces SMS codes with your fingerprint, face or screen lock. Two-step verification adds a password WhatsApp asks for when your number is set up on a new phone. Use both.

Final Words

WhatsApp hacks almost always come down to one moment: a shared code, an unlocked phone or a dialled code. Spend 60 seconds today turning on a passkey, two-step verification and a recovery email, then check your linked devices. It's the easiest way to keep your chats, your money and your friends safe.

More Android tricks: see all Android tricks

Sources: WhatsApp Blog and Meta Newsroom (August 2026 account security update), Dubawa, Kaspersky, Techpoint Africa. Image credits (Wikimedia Commons): "Smartphone in Hand" by NeONBRAND (CC0); "National Cyber Security Awareness Month" by the National Science Foundation (public domain). WhatsApp is a trademark of Meta Platforms, Inc.