WhatsApp Hacked? How to Get Your Account Back and Lock It Down

If your WhatsApp has been taken over, the only fix that actually removes the other person is to re-register your number: open WhatsApp on your own phone, tap Log back in, and enter the 6-digit code that arrives by SMS or call. WhatsApp's own help centre says every other device on the account is logged out the moment you do. Changing a password does not do this. Re-registering does.

• How do I get my WhatsApp back right now?
• What if it asks for a PIN I never set?
• Can I recover WhatsApp without backup?
• Can I check if someone is using my WhatsApp?
• How did they get in?

How do I get my WhatsApp back right now?

Do these in order, and do not skip the first one to go and complain somewhere:

• Kill call forwarding first. Dial ##002# from your phone. This switches off all call forwarding, a trick India's cybercrime coordination centre has warned scammers use to capture WhatsApp codes. If forwarding is on, your new code goes to them, not you.
• Re-register. Open WhatsApp, tap Log back in, then Continue, enter your number if prompted, and type in the 6-digit code. This logs out every device using your account.
• Tell your contacts. Send a status update or ask family to warn your groups. Whoever had your account may be messaging people as you, usually asking for money.
• Report it. Call 1930, the national cyber fraud helpline, or file at cybercrime.gov.in, especially if anyone lost money.

One counter-intuitive warning from WhatsApp itself: try to recover the account before you report it inside the app. Reporting the compromised account can get it banned.

What if it asks for a PIN I never set?

That means whoever took the account turned on two-step verification to lock you out. It is annoying, but it is not the end. WhatsApp's help centre says that if you do not have the PIN, wait 7 days and try again. The important part is that the intruder is logged out as soon as you enter the 6-digit SMS code, whether or not you know the PIN. They lose access straight away; you just have to wait a week before you can use the account normally.

Can I recover WhatsApp without backup?

You can recover the account without a backup, because the account is tied to your phone number and SIM, not to the backup. What you may not get back is your chat history. Messages are stored on the device, so if you set up a Google Account or iCloud backup, you may be able to restore them. Without one, the account comes back empty. The upside of that design: WhatsApp says someone who registers your number on a new phone cannot read your past conversations either.

You do need the SIM. WhatsApp states plainly that an account cannot be recovered without a SIM card carrying the same number. If the phone itself is lost, file a police complaint, get a duplicate SIM from your operator, then block the handset through Sanchar Saathi.

Can I check if someone is using my WhatsApp?

Partly. Open Linked devices in WhatsApp and look for any computer or browser you do not recognise; log it out. WhatsApp also notifies you when someone tries to register your number on another phone, so never ignore that alert. What WhatsApp will not tell you is who accessed your account, or when, or from where. Its help centre says it cannot provide that.

How did they get in?

Almost never through hacking in the movie sense. The common routes in India are boring and effective:

Trick	What it looks like
The code request	Someone, often messaging from a friend's already-hijacked number, asks you to pass on a 6-digit code you just received. That code is your account.
Call forwarding	A "courier agent" asks you to dial a code starting with *21* to confirm a delivery. Your calls and OTPs now go to them.
Fake files and links	An APK or link sent on WhatsApp or SMS that installs something on your phone.

India's cybercrime coordination centre, I4C, warns against dialling any code beginning with *21*, *61* or *67* that a stranger sends you. The rule that covers all of these: nobody legitimate ever needs your WhatsApp code. Not a friend, not a bank, not the police. If you want the wider picture, our guides to the digital arrest scam and AI voice cloning calls cover the same playbook from different angles.

How do I stop it happening again?

Once you are back in, open Settings, then Account, then Two-step verification, set a 6-digit PIN only you know and add an email address so you can reset it without the 7-day wait. Then review your Linked devices again. That takes two minutes and closes the door most takeovers walk through. More practical guides like this are on our Tech and AI page.