WhatsApp Account Stolen: How to Get It Back Right Now

Getting back in and warning your contacts are two different jobs, and they can happen at the same time. While you work on the account, somebody else can use a phone call, a social account, or any channel your people recognize to pass the warning along.

The phrase “cloned WhatsApp” usually mixes two things: an account taken over and a profile copied onto a different number. These steps are for the first one. If messages are going out from another number with your photo, read the section on fake profiles before you report anything. If you are not sure which one you are dealing with, the signs are in is my WhatsApp hacked.

1. How to get your WhatsApp account back

Open the official WhatsApp app on a phone you trust, enter your number, and ask for a new code. The WhatsApp Help Center explains that registering the number again with the six-digit code received by text or phone call signs out every device on the account, including the one the other person is using.

Do not pass that code to anybody. Support never needs you to send a code by message, by phone, or through a form. Type it only into the official app. Changing a password on its own does not remove the other person: according to the Help Center, the way back is the new registration with the code.

Once you are in, check the linked devices and turn on two-step verification; the menu paths are in section 6. It can appear as a PIN or as a password, because WhatsApp has been moving from one to the other.

Before you delete anything, save what you have: times, numbers, the code notifications, the conversations used to ask for money, and the receipts your contacts send you. Getting the account back does not guarantee the whole history comes back; that depends on the backup and on the devices involved.

2. What if the code does not arrive?

If the text with the code does not come through, it does not mean the account is gone for good. Wait out the time the app itself shows before asking for another code, and check that the phone has signal, that the line is still active, and that the number was typed correctly with the country code.

There are two other routes. If the option to receive the code by phone call appears, try that. And if you had already added and verified an email address on the account, WhatsApp can send the code there: the Help Center notes that this option only exists for people who added and verified the email beforehand.

If you lost the line as well, call your carrier through its official channel and ask for the same number on a new SIM or eSIM. According to WhatsApp, the account cannot be recovered without a SIM carrying the same number. If the phone was stolen, follow how to lock a stolen phone in parallel. Do not accept help from anyone who asks for the code or for remote access to your device.

The app is asking for a PIN you never set

That happens when whoever got into the account turned on two-step verification. Even so, the person using your account is signed out the moment you enter the six-digit code from the text message. The unknown PIN only stops you from getting in: in that case the official instruction is to wait seven days and try again, without taking shortcuts offered by strangers.

While you wait, keep warning your contacts through other channels, so nobody sends money or information believing they are talking to you.

Be careful with anyone who promises to recover your account

After an account is taken, people show up offering to recover WhatsApp for a fee. Do not pay. Recovery happens inside the app itself, and a fast or paid offer is often a second attempt at the same person.

3. Tell your contacts as soon as you can

Do not wait for the access to come back. Start with the people most likely to act quickly on a request from you: close family, and anyone you normally talk to about money or work.

Use a channel where they recognize you, such as a phone call, another social account, or a conversation in person. A plain message does the job:

Ask them not to reply, not to send any code, and not to pay anything until they hear a confirmation from you on another channel. If somebody says they got a message, ask them to write down the time, what it said, and the number or account that appeared.

4. Someone already sent money. What now?

Whoever sent the money should call their bank right away and report it as fraud. An instant payment, a wire, or a same-day transfer is built to move fast, and once it lands it is often impossible to pull back, so the call has to happen while there may still be money to freeze in the receiving account.

How much protection exists depends on how it was paid. A payment made with a credit or debit card can be disputed with the card issuer, and the steps are in how to dispute a credit card charge. A wire or an instant transfer the sender approved is the hardest case, and wire transfer scams covers what the bank can still try. Nobody should promise a refund here; reporting early is what improves the odds.

Save everything: the payment confirmation, screenshots of the conversation, the number the scammer used, and anything else tied to the case.

The person who sent the money can also report it to the Federal Trade Commission at reportfraud.ftc.gov and, because it happened online, to the FBI Internet Crime Complaint Center at ic3.gov. Whoever had the account taken should keep the messages and the case numbers. If there is immediate physical danger, call 911; that number is not the channel for a fraud that already happened.

The full order of the calls, and what each one can realistically do, is in instant payment scam: what to do.

5. Fake profiles and the police report

Do not report your own compromised account before you have tried to recover it. WhatsApp warns that doing so can get the account banned while you are still trying to retrieve it, and can make access or data preservation harder.

Reporting is the right move when there is a separate number or fake profile using your name and your photo. In that case your contacts can block and report that other user inside the app. Your own compromised account and a fake profile are two different reports, not one.

File a police report as well and keep the evidence. Many police departments take this kind of report online or over a non-emergency line; call the non-emergency number for your local department and ask which applies where you live.

If somebody used your personal information to open accounts, report it at identitytheft.gov, which builds a recovery plan and the affidavit companies ask for. The full order of the reports is in how to report a scam.

6. Check linked devices and lock the account

Once you are back in, check the linked devices, such as computers running WhatsApp Web. On Android, tap the three dots at the top of the screen and then Linked devices. On iPhone, go to Settings and then Linked devices. Tap any session you do not recognize and then Log out, as the Help Center page on linked devices describes.

Then turn on two-step verification, under Settings, Account, Two-step verification; on Android, Settings sits in the three-dot menu. These paths were checked on September 22, 2026, and menu names move between versions of the app, so use the Help Center search if a path does not match your screen. Add an email address only you control, because it can receive the code when a text message fails, and do not share the registration code or the password with anyone.

Do the same on the other accounts that sign you in with a code by text, starting with your email, since that is what resets everything else. Which method is stronger is in two-factor authentication.

7. Do not let embarrassment delay the warning

It is common for somebody to realize a scam happened and then wait before telling anyone, because it feels embarrassing to say it out loud. That silence is what gives the scammer more time to keep using your name.

These scams are built to look like ordinary situations and to get people moving before there is time to check anything, and the fault belongs to the person running the scam. Put the attention on what can be done now: get the access back, warn your contacts, and keep the evidence. A quick warning gives people something concrete to act on while the rest is being sorted out.

WhatsApp recovery FAQ

Sources

The guidance and the menu paths were checked on September 22, 2026, on these pages:

• WhatsApp: how to recover a compromised account
• WhatsApp: about registration and two-step verification, including the code by email
• WhatsApp: about linked devices
• WhatsApp: message history on linked devices
• Federal Trade Commission: report fraud
• Federal Trade Commission: identitytheft.gov
• FBI: Internet Crime Complaint Center

What a bank can still do about a payment depends on how it was sent and on how fast it was reported. Ask the bank directly instead of assuming a rule that may not apply to your case.