WhatsApp messages are end-to-end encrypted, so attackers rarely "break" the encryption. They usually get in another way: by tricking you into handing over a code, linking their device to your account, using your phone while you're away, or installing spy software on your phone. The good news is that most of these can be spotted and fixed in a few minutes.

Signs your WhatsApp may be compromised
Unknown linked devices. This is the most common method. Someone links your account to WhatsApp Web or another device and quietly reads your chats.
Unexpected verification codes. You get an SMS with a 6-digit WhatsApp code you didn't request. Someone is trying to register your number on their phone.
Sudden logout. WhatsApp logs you out and asks you to verify again.
Messages you didn't send. Friends tell you they got strange messages, links or requests for money from you.
Messages already read or sent items you don't remember, or disappearing messages switched on without you doing it.
Phone-level warning signs. Fast battery drain, a hot phone, unusual data use, or apps you don't remember installing. These can point to spyware on the phone itself.
Step 1: Check linked devices
Open WhatsApp and go to Settings, then Linked devices.
Look at every device on the list. Check the device name and the "last active" time.
Tap any device you don't recognize, then tap Log out.

If you see nothing you don't recognize, log out of all of them anyway if you're unsure, and link again only the ones you use.

Step 2: Turn on two-step verification
Go to Settings, then Account, then Two-step verification.
Set a 6-digit PIN that you don't use anywhere else.
Add a recovery email so you can reset the PIN if you forget it.

This means that even if someone gets your SMS code, they can't take over your number without the PIN. Never share your SMS code or PIN with anyone, including people claiming to be from WhatsApp or a friend "who sent the code by mistake."

Step 3: If the hacker has taken over your account

If you're locked out or messages are being sent from your account:

Reinstall WhatsApp and register with your phone number.
Enter the SMS code when it arrives. This logs the other person out of your account.
If the hacker turned on two-step verification, you may have to wait up to 7 days before you can reset it.
Report the problem to WhatsApp support from within the app, or by email, and explain that your account was taken over.
Warn your contacts right away, especially family and close friends, so they don't send money or click links.
Step 4: Clean your phone

If you think spyware is on your phone:

Update everything. Install the latest phone system update and WhatsApp update.
Review installed apps. Delete anything you don't recognize.
Check special permissions (Android). In Settings, look at Accessibility and Device admin apps. Spy apps often hide here.
Run a scan. On Android, use Google Play Protect.
Check profiles (iPhone). Go to Settings, General, VPN & Device Management, and remove any profile you didn't install.
Change your phone lock and your passwords, especially your Google or Apple account and email.
Factory reset if the problem continues. Back up only your photos and contacts, not apps, and set the phone up as new.
Step 5: Check your SIM and mobile money

Attackers sometimes go after the SIM card itself. If your number stops working unexpectedly, contact your mobile network (for example MTN or Airtel) immediately and ask if a SIM swap has been done. Also change your mobile money PIN and check your recent transactions if there is any doubt.
**
How to stay protected
Turn on app lock for WhatsApp (Settings, Privacy, App lock).
Don't scan QR codes or click links from people you don't know.
Never lend your unlocked phone, even briefly.
Turn off automatic media download.
Use a strong screen lock and keep your phone updated.
Be suspicious of messages about prizes, jobs, or emergency money requests, even from known contacts. Call them to confirm.
When to get expert help**

If you're a journalist, activist, lawyer, or politician, or you think someone powerful is targeting you, ordinary cleanup may not be enough. Advanced spyware can be hard to detect. In that case, contact a specialist such as Access Now's Digital Security Helpline.

Quick summary

Check Linked devices, log out anything unknown, turn on two-step verification, never share your codes, and clean your phone if you suspect spyware. These steps stop most WhatsApp hacks.