How to protect your WhatsApp account from takeover

A common scam begins with a message from a friend: "Please send me the code you just received by mistake." Within minutes the scammer controls your account and starts asking your contacts for money. The same trick works on many chat apps. You can prevent it with a few simple settings.

How takeovers happen

• Code tricks: a scammer registers your number on their phone, the app sends you a verification code and they persuade you to share it.
• Fake support messages: someone pretends to be official support and asks for your code or PIN.
• Stolen SIM: a criminal convinces a network agent to move your number to a new SIM.
• Unsafe links: a fake page asks you to log in and captures your details.

Rule number one

Never share a verification code with anyone, including a friend or a family member. If a friend asks for it, their account is probably already hacked. Call them to check.

Turn on two-step verification

In the app's settings, switch on two-step verification and create a PIN. The app will then ask for this PIN from time to time and whenever someone tries to register your number. Add a recovery email so you can reset the PIN if you forget it.

Check linked devices

Open the linked devices screen and look at the list. If you see a device you do not recognise, log it out immediately. Check this screen regularly.

Protect your SIM

Ask your network about a SIM PIN or other protection, and never give your SIM details to strangers. Report any sudden loss of network signal on your phone, especially if it happens unexpectedly, because it may indicate a SIM swap.

Adjust privacy settings

Limit who can see your profile photo, status and last seen. Fewer public details make it harder for scammers to impersonate you.

If your account is taken

1. Try to register your number again on your phone to get back in.
2. Use your two-step PIN or recovery email if asked.
3. Warn your contacts through another channel, such as a phone call or social media, so they do not send money.
4. Report the incident to the app's support and to your network provider.

Teach others

Many victims are older relatives or friends who do not know the trick. Share this advice with them and explain that no genuine service asks for a verification code.

Written by the EarnNaija team at EarnNaija Digital Technologies.

This article is general information, not financial or legal advice. Earnings are never guaranteed. See our fees page for the exact costs.