WhatsApp Hacked? How to Check, Recover Your Account and Stop It Happening Again.

“Brother, my WhatsApp account has been hacked.”

That was the text I got from my sister. A minute later she called me, crying. She had given her account away to a stranger on the phone, and it took less than a minute.

The same caller had tried my brother first. Same call, same script, same voice. My brother said no. My sister said yes. The only difference between them was about ten seconds of hesitation.

In this article, I’ll show you exactly how this WhatsApp scam works, so you can recognize it the second it happens to you. You’ll also learn how to check whether someone is secretly reading your chats right now, how to get your account back if it’s been taken, and the two settings that make this almost impossible to happen to you.

Why scammers target WhatsApp in Africa

For many of us, WhatsApp isn’t just an app. It’s where we run our businesses, plan family events, organize church activities and keep in touch with people we love. When an account is taken over, the damage is immediate.

WhatsApp has more than 3 billion users worldwide, and hundreds of millions of them are in Africa. It works on slow networks, it’s affordable, and it’s often the main way people communicate. That makes it a very attractive target. Many users have also never been shown how to protect their accounts or spot a scam, and scammers know it.

How scammers get your number

You might wonder how a stranger even found your number. Usually, it’s easier than you think:

• Event flyers and invitations. If you’re listed as the contact person for a wedding, funeral or church event, your number is now public.
• School and church groups. Parent groups and ministry groups share numbers widely.
• WhatsApp groups. This is the most common source. Many of us belong to groups with 100, 300 or even 400 members, and not everyone in them is there with good intentions.

Scammers collect numbers from these groups and call people one by one. Because they know which group they found you in, their story sounds believable.

How the scam works: the “meeting code” call

Almost every WhatsApp hack we’ve seen starts the same way: a phone call. The script is simple, and that’s what makes it dangerous.

1. The caller claims to know you. They say they’re in one of your WhatsApp groups. In my brother’s case, it was a group called “Wealth and Legacies”. In others, it’s a church prayer group or a parents’ group.
2. They invent an urgent meeting. For example: “The pastor has called an emergency prayer session on Zoom in one hour. I’m calling everyone to confirm they got the meeting code.”
3. They tell you a code has been sent to you by SMS. While they talk, they’re actually entering your phone number into WhatsApp on their own device. That makes WhatsApp send you a real verification code.
4. They hide what the code really is. My brother’s code arrived in Spanish, so he wouldn’t recognize it as a WhatsApp message.
5. They rush you to read it out. “Did you see it? Just read me the numbers.” They don’t want you to stop and think. When my brother asked the caller’s name, the caller dodged the question and asked for the code again.

The moment you read that code out loud, your account is theirs. My sister did exactly that, thinking it was a meeting invite. Within seconds, her WhatsApp was active on the scammer’s device and she was locked out.

Remember: a code that arrives while someone is on the phone with you is never a meeting code. WhatsApp will never call you to ask for it.

What scammers do once they’re in

There are two ways they can use that code, and one is much harder to notice.

• They move your account to their phone. You get logged out right away, so at least you know something is wrong.
• They link your account to another device, such as a computer. You stay logged in and nothing looks different, but they can read every message you send and receive. This can go on for days, weeks or longer before anyone notices.

Either way, their goal is money. Here’s how they usually get it:

• Blackmail. They download private photos, videos and conversations, then threaten to share them with your family, friends or the public unless you pay.
• Fake emergencies. They message or call your loved ones pretending something has happened to you. A typical line: “He’s had an accident and is in hospital. They need a deposit before treatment, and he can’t talk right now.” In a panic, people send money first and ask questions later.
• Spying on business. If it’s a business account, they can see your customers, deals and payment details.

That’s why speed matters. The faster you act, the less damage they can do.

How to check if your WhatsApp is hacked

Even if you’ve never been locked out, someone could be quietly reading your chats through a linked device. Checking takes about two minutes:

1. Open WhatsApp and tap the three dots in the top right corner.
2. Tap Linked devices.
3. Look at the list. It shows every computer or device your account is connected to.
4. Tap any device you don’t recognize and choose Log out.

If you’re not sure which devices are yours, log out of all of them. You can always link your own computer again afterwards.

If the list is empty, no other device is connected to your account.

How to recover a hacked WhatsApp account

If you’ve been locked out, act straight away. The verification code always goes to your SIM card by text message, so you can take your account back:

1. Open WhatsApp on your phone and tap to log back in.
2. Tap Continue, enter your phone number, then tap Next.
3. WhatsApp sends a six-digit code to your phone by SMS.
4. Enter the code. You’re back in, and the scammer is logged out.

Once you’re in, check Linked devices (see above) and log out of anything you don’t recognize.

If the scammer also took your phone number (SIM swap)

Sometimes scammers trick your mobile network into moving your number to their SIM card. This is called a SIM swap. If your phone suddenly has no signal or says “No SIM”, this may be what happened.

In that case, call or visit your mobile network first and get your number back. Until you do, every verification code goes straight to the scammer, and trying to log back into WhatsApp won’t help.

Warn your family and friends

As soon as you suspect a problem, tell the people closest to you, by phone or another app. Ask them to ignore any message from your account asking for money, and to call you directly before sending anything.

How to stop it happening again

Prevention beats recovery every time. Two habits protect you from almost every version of this scam.

1. Turn on two-step verification

Two-step verification adds a six-digit PIN that only you know. Anyone trying to set up your WhatsApp on a new phone, or link it to another device, needs both the SMS code and your PIN. That’s two locks instead of one.

1. Open WhatsApp and tap the three dots in the top right corner.
2. Go to Settings, then Account.
3. Tap Two-step verification, then Turn on.
4. Create a six-digit PIN and enter it again to confirm.
5. Add your email address when asked, and verify it with the code WhatsApp emails you. This lets you reset your PIN if you ever forget it.

When you’re done, the screen shows that two-step verification is on. Leave it on.

2. Never read out a code or PIN to anyone

Two-step verification only works if you keep both the code and the PIN to yourself. If you give a caller both, no setting can protect you.

WhatsApp will never call you and ask for a code. If anyone does, it’s a scam. Hang up.

Warning signs to share with your family

If a call has any of these, hang up:

• Someone you don’t know says they’re from one of your WhatsApp groups.
• They mention an urgent meeting, prayer session or event you weren’t told about.
• A text with a code arrives while they’re on the phone with you.
• The text is in a language you don’t normally use.
• They rush you or avoid simple questions, like their name.
• Anyone asks you to read out a code or PIN, for any reason.

The ten seconds that matter

My sister’s story could have happened to anyone. The only difference between her and my brother was ten seconds of hesitation, and knowing what that code really was.

Take two minutes today: check your Linked devices and turn on two-step verification. Then share this article with your parents, siblings and group chats, because the people most likely to fall for this are the ones who’ve never heard of it.

Watch the full episode above, and subscribe to SecureAfric on YouTube for more real stories about scams and how to stay safe online.