WhatsApp account hacked or cloned: how to recover it and protect yourself
How to notice your account was cloned or hacked
- You received a WhatsApp verification code by SMS without requesting it
- Your account disconnected from your phone on its own with no apparent reason
- Contacts warn you they're receiving strange messages or requests for money in your name
- Your WhatsApp shows "online" at times you weren't using it
Step-by-step to try to recover the account
- Open WhatsApp on your phone and try reinstalling it, entering your number normally
- If it asks for a verification code, the system should resend a new code to your number, regaining control of the account
- If you can't, contact official WhatsApp support explaining the compromised account situation
- Warn your contacts immediately that the account was compromised, so they ignore any strange request received during that period
Turn on two-factor authentication now
Under Settings > Account > Two-step verification, set a six-digit PIN. This is what stops most cloning scams, since even with the SMS code in hand, the scammer would still need this additional PIN to access the account.
Watch out for the most common cause of cloning
Most cases start with the victim themselves accidentally forwarding the verification code received by SMS, usually after a call or message posing as a company, a sweepstakes, or even a known contact. Never share this code with anyone, under any circumstance.
PruPru Digital Security Checklist
Account and password protection is one of the 10 steps in our free digital security checklist for small businesses.
See the security checklist →Frequently asked questions
Does recovering the account erase old conversations?
It depends on whether you have backup enabled (on Google Drive or iCloud). With backup configured before the incident, the conversation history can be restored normally after regaining access.
Does two-factor authentication guarantee total protection against cloning?
It drastically reduces the risk, but no protection is absolute. Keep being suspicious of requests for a verification code and avoid sharing that code with anyone, even if it seems like a legitimate situation.