WhatsApp is the communication tool of choice for most mobile users, but being the most used app in the world has a downside and that is that it makes it a target for those who want to steal our account to access our chats or send spam.
WhatsApp has security measures in place to prevent this from happening, but it is not impossible. They can steal our account by having us send our verification code, through WhatsApp Web or if your mobile has been stolen (and you have no protection). In this article, we will tell you the steps to follow if your WhatsApp account has been stolen.
My WhatsApp account has been stolen via verification code
When we activate WhatsApp on mobile for the first time, we have to enter our phone number and we receive an SMS message with a code that we have to enter. Without this code, it is not possible to activate the account, so it is very important not to share it with anyone.
WhatsApp account thieves use a social engineering method to get hold of the victim’s code. They send a message in which they warn that the WhatsApp account has been hacked (or something similar to scare us) and ask us to send the verification code that we are going to receive by SMS. Once we give it to him, the thief can activate the account on another device and we will be left out because WhatsApp can only be used on one terminal at a time.
WhatsApp can only be used on one device. If we give our verification code, when the thief logs in, they will lock us out.
The intention of this type of theft is usually to send spam to our contacts, something annoying but with relatively harmless consequences. But this does not mean that we should not act quickly, if a person impersonates us, they could obtain sensitive information and lead to something more serious.
What do I do to recover my account? If you find yourself in this situation, follow these steps:
- Talk to your contacts by phone or another way so they know that the person who is controlling your WhatsApp is impersonating your identity, thus preventing them from sharing information with him or her.
- Register your WhatsApp account again with your phone number.
- Enter the six-digit code that you will receive by SMS. If many attempts have been made, the SMS may not arrive for a few hours, in which case try the call. As soon as you log in, the thief will be logged out.
- If it also asks for an additional six-digit code, the attacker may have activated two-step verification. In this case, WhatsApp does not give many options: you will have to wait seven days to be able to use the account again. The good part is that as soon as you do step 3, the other person’s session will be closed so they will not be able to use your account at that time.
To avoid having your account stolen with this method, the solution is obvious: do not share the six-digit code with anyone and be suspicious if you receive a message asking for it. Also, you can activate two-step verification and no one will be able to access your account without the second code. Of course, do not forget or you could block your account for seven days.
I think someone is spying on me through WhatsApp Web
The second way for someone to access your WhatsApp chats is by entering your account through WhatsApp Web. Unlike the previous case in which the thief can be a totally unknown person, in the case of WhatsApp Web, it is usually someone who has access to our mobile since to log in it is necessary to scan a QR code.
Detecting if someone is using your WhatsApp Web is easier since WhatsApp included the notification that tells us that there is an active account at that time. If you see this on your mobile and you are not using it, be suspicious and take action. Preventing them from spying on you is very easy by following these steps.
- Enter WhatsApp and, in the menu in the upper right corner, choose the WhatsApp Web option.
- Click on the ‘Close all sessions’ button and the spy will be expelled from the application.
What if my mobile has been stolen?
In the event that you do not have access to your mobile phone due to theft or loss, there are several ways to prevent someone from accessing your chats. If you had a code or fingerprint screen lock, you should be safe. In any case, follow these steps:
- Block the SIM card by calling your operator. This will not close the active WhatsApp session, but it will prevent them from verifying the account again since they will not be able to receive the SMS.
- To ensure that no one accesses your chats, you must deactivate the account. To do this, send an email to [email protected] putting in the subject “Stolen / lost phone: Please deactivate my account” and attaching your mobile phone number with the international prefix included (if it is a Spanish number, the prefix is +34).
- In order to activate your account again, you will have to request a duplicate SIM from your operator and re-verify the account on a new mobile. Keep in mind that if 30 days have passed since you deactivate the account (step 2), it will be permanently deleted.