How to Recover a Hacked
WhatsApp Account in India
Someone else is using your WhatsApp account. Here's how to kick them out, take back control, warn your contacts, and make sure it can never happen again.
Last updated: June 2026 · 6 min read
How WhatsApp accounts get taken over in India
The most common method: someone calls pretending to be a friend and asks you to forward a 6-digit OTP "accidentally sent to your number." That OTP was WhatsApp's registration code — once they have it, they own your account.
How to Know If Your WhatsApp Is Hacked
You're suddenly logged out of WhatsApp
WhatsApp only allows one device per number. If someone registered your number on their phone, you got pushed out.
Friends say they received strange messages from you
The hacker is using your account to run scams — usually asking contacts to send money or share OTPs.
WhatsApp says "your account is registered on another phone"
This message appears when you try to open WhatsApp and your number is already active elsewhere.
You can't log in even after entering the OTP
If two-step verification is enabled on the hacked device, you'll be blocked for up to 7 days.
Step 1: Re-Register Your Number (Works in Most Cases)
WhatsApp ties your account to your SIM number. As long as you still have your SIM, you can force-logout the hacker by re-registering.
Make sure your SIM is in your phone and working (can receive SMS)
Open WhatsApp → enter your phone number → tap "Next"
WhatsApp sends a 6-digit OTP via SMS — enter it
This immediately logs out whoever was using your account on their device
Your chats restore from your Google Drive backup automatically
If the hacker enabled two-step verification
You'll be asked for a PIN you don't know. WhatsApp will show an option — "Forgot PIN?" — which sends a reset email if an email was linked. If not, you must wait 7 days before the PIN requirement is lifted. During this time, the hacker is also logged out.
Step 2: Warn Your Contacts Immediately
The hacker likely used your account to message friends pretending to be you. Common scams: "I'm in an emergency, please send ₹5,000 to this UPI ID" or "I need an OTP, please forward it."
Post a WhatsApp status
Once you're back in, immediately post a status: "My WhatsApp was hacked. Any messages asking for money or OTPs were NOT from me. I'm back in control now."
Message close family and friends directly
Send a personal message to your most frequent contacts. The hacker may have targeted them specifically.
Alert any group admins
If you're in family or work groups, tell the admins your account was compromised so they can warn members.
Step 3: Enable Two-Step Verification (Now)
This is the single most effective protection against future takeovers. It adds a 6-digit PIN that must be entered every time WhatsApp is registered on any new device with your number — even if the attacker has the OTP.
Open WhatsApp → Settings → Account → Two-step verification
Tap "Enable" → create a 6-digit PIN (not your lock screen PIN, not your birthday)
Add your email address — required to reset the PIN if you forget it
Save the PIN somewhere safe — you'll be asked for it periodically and whenever re-registering
Step 4: Log Out All Other Devices
WhatsApp Web / Linked Devices can remain active even after you re-register. Check and remove them.
Open WhatsApp → tap ⋮ → Linked devices
You'll see a list of all active sessions — browsers, tablets, WhatsApp Desktop
Tap each device you don't recognise → Log out
Or tap "Log out from all devices" to clear everything at once
Report to WhatsApp and Cybercrime
Email WhatsApp support
Send an email to support@whatsapp.com with subject "Account Compromised." Include your phone number and what happened. WhatsApp may be able to disable the account faster.
File at cybercrime.gov.in
If the hacker sent messages asking for money from your contacts (and someone paid), this is cyber fraud under IT Act Section 66C/66D. File at cybercrime.gov.in or call 1930.
Inform your bank if UPI is involved
If the hacker used your WhatsApp to trick contacts into sending money, and those contacts paid via UPI, they should call 1930 and their bank immediately.
How to Prevent It from Happening Again
Never share an OTP with anyone
WhatsApp, banks, and government services will never call you and ask for an OTP. If someone does, hang up.
Enable two-step verification (if you skipped Step 3, do it now)
This makes it impossible to take over your account even with the OTP.
Set WhatsApp profile photo visibility to "My Contacts"
Scammers copy your photo and name to impersonate you on a new number. Go to Settings → Privacy → Profile Photo → My Contacts.
Lock WhatsApp with fingerprint
Settings → Privacy → Fingerprint lock. Prevents someone with physical access to your phone from reading your messages.