WhatsApp hacked: how to get your account back
Friends are getting messages from your number asking for money or a 6-digit code. Re-register WhatsApp on your phone, turn on two-step verification and warn your contacts. Most people recover in 30 minutes.
Do right now
· Within minutes- 🇿🇦 ZA
Don't pay if a 'friend' asks for money on WhatsApp. Call them on the phone first. Most 'send me eWallet please' WhatsApp messages right now in South Africa are takeovers.
- 🇿🇦 ZA
If your phone also says 'No service', someone may have SIM-swapped you — open the SIM-swap playbook first, then come back here.
- 🇿🇦 ZA
Open WhatsApp and re-register your number. Enter the new six-digit code WhatsApp SMSes you. **Do not share that code with anyone, ever.** The attacker is logged out the moment you finish.
More detail
Re-registering is the official, fastest way back in. The attacker's session ends as soon as your number completes verification on your device.
- 🇿🇦 ZA
Immediately turn on two-step verification: Settings → Account → Two-step verification. Set a 6-digit PIN you'll remember and add a recovery email.
- 🇿🇦 ZA
Settings → Linked devices. Log out anything you don't recognise. That's where WhatsApp Web sessions the attacker started will appear.
Do today
· Within hours- 🇿🇦 ZA
Broadcast or status update: 'My WhatsApp was hacked for [time window]. Anyone who got a money request — that wasn't me. Please ignore.' This stops follow-on losses to friends and family.
- 🇿🇦 ZA
Check your bank for unusual eWallet / Cash Send / Send-iMali / Instant Money transfers and report any to the bank's fraud line.
- 🇿🇦 ZA
Lay a SAPS OB report. Email SAPS Cybercrime with screenshots of the takeover messages and the WhatsApp re-registration timestamp.
Ongoing protection
· Build the habit- 🇿🇦 ZA
Keep two-step verification on. Treat any WhatsApp code request — even from a 'friend' — as a takeover attempt by default.
Related situations
SIM-Swap Attack
Phone says No Service out of nowhere? Get your number back from your carrier and protect your bank and email in minutes.
Email or Social Media Hacked
Locked out of email, Facebook or Instagram? Recover the account, lock out the hacker and stop scams sent in your name.
SASSA grant taken / SRD R350
SASSA grant or SRD R350 stolen or redirected? Contact SASSA, fix your details and report it step by step.
Is this happening at work?
If a business account, company device or customer data is involved, the steps change. Get help built for organizations.