How to recover your WhatsApp account if it has been stolen

Last update: 19 September, 2026
  • The importance of never sharing your six-digit verification code to prevent identity theft.
  • The recovery process involves registering the phone number and managing two-step verification.
  • The need to coordinate the cancellation of the SIM card with the operator in case of loss or theft of the device.
  • Using official WhatsApp technical support to deactivate compromised accounts via email.

Young woman with an expression of anguish and frustration holding her mobile phone, representing the moment of discovering the account theft.

Today, WhatsApp has become the center of our communications, but that popularity comes at a price: it has become the

Although the app has fairly decent security measures, the reality is that zero risk doesn't exist . A careless mistake with an SMS code, leaving your phone unlocked, or a poorly managed duplicate SIM card can open the door to a stranger. If this has happened to you, don't panic; here we explain exactly what to do to regain control of your digital life.

Frustrated and desperate man using a smartphone, representing the helplessness of losing access to WhatsApp
Related articles:
How to recover your WhatsApp account: a complete guide for suspensions and thefts

When the theft is due to deception with the verification code

An anonymous hand taking a mobile phone from a shelf, illustrating the physical theft of the device.

This is the most common method and relies on social engineering. The attacker contacts you, sometimes pretending to be from technical support or claiming they made a mistake sending a message, and asks you to forward the six-digit code you just received via SMS. As soon as you provide it, the thief activates your number on their phone, locking you out, since WhatsApp only allows one active session at a time.

  Guide to sending photos on WhatsApp without losing quality

To resolve this issue, the first step is to notify your contacts via another method (phone call, Instagram, Telegram) so they know it's not you writing and don't fall for potential scams. Next, try registering your account again by entering your phone number in the app. Upon receiving the verification code via SMS and entering it, the attacker's session will automatically close.

If the SMS takes a while to arrive or is blocked due to too many attempts, don't give up and use the automatic call option , where an answering machine will dictate the numbers. However, if upon logging in it asks for a PIN that you didn't set, it means the hacker activated two-step verification. In this case, you'll have to wait seven days to reset the PIN, but the good news is that the attacker won't be able to use the account during that time.

encryption in cybersecurity
Related articles:
Encryption in cybersecurity: a complete and practical guide

Spying through WhatsApp Web or Desktop

Smartphone wrapped in a chain with a padlock, symbolizing reinforced security and account protection.

It's not always necessary to have your mobile account taken away; sometimes the problem is that someone has scanned your QR code on a computer. This usually happens when someone with physical access to your phone (an acquaintance or colleague) logs in on their PC. Although WhatsApp now requires fingerprint or Face ID, if they know your phone's unlock code, they're in.

To clear your account of spyware, go to the settings menu and enter the linked devices section . There you'll see a list of all the browsers or desktop applications that have access to your chats. If you see any device you don't recognize or an unusual location, simply tap on it and select "Log out" to remove the intruder instantly.

  How to secretly see who views your WhatsApp statuses

What to do if your mobile phone or SIM card has been stolen

Laptop and smartphone on a wooden desk, representing the use of WhatsApp Web and the management of linked devices.

If the problem is that you no longer have the device, the priority isn't the app, but recovering your phone number . The first thing to do is call your mobile carrier to block the SIM card immediately. This prevents the thief from receiving verification SMS messages to access your account or other apps linked to your number.

For added security, it's recommended that you deactivate your WhatsApp account by sending an email to [email protected] In the subject line, write "Stolen/Lost Phone: Please deactivate my account," and in the body of the message, include your phone number with the international prefix (for example, +34 for Spain). Please note that if 30 days pass after deactivation, the account will be permanently deleted.

Complete guide to finding your SIM, phone number and managing it on any mobile phone
Related articles:
Complete guide to finding your SIM, your number and managing it on any mobile phone

Once you have a duplicate SIM card in a new device, you can register again. If you had backups enabled on Google Drive or iCloud , you can restore your conversations and files, provided the backup was created before the theft.

Suspended or blocked accounts

Stressed man talking on the phone, representing the action of calling the operator to block the SIM card.

Sometimes, after an attack or due to using unofficial versions (like WhatsApp Plus), the app may display a message indicating your account has been suspended . If it's a temporary suspension, you'll see a countdown timer and simply have to wait. If it's a permanent suspension, WhatsApp likely detected excessive spam or prohibited content.

To try and reverse this, use the request review button within the app. If it doesn't appear, send a formal email to technical support explaining that you are using the official app and that you haven't violated the rules, detailing your phone model and operating system version to expedite the process.

  How to schedule WhatsApp messages on Android, iPhone, and Web

How to protect your account so it doesn't happen again

The best defense is prevention. It's essential to activate two-step verification (Settings > Account > Two-step verification) by creating a secret PIN that only you know. Additionally, link a recovery email address ; that way, if you forget your PIN, you won't have to wait a week to log back in.

Remember that WhatsApp will never ask for your verification code or PIN via email or text message. Always keep the app updated to the latest version and, above all, never, under any circumstances, share your access codes with anyone, even if they swear it's an emergency or they're from technical support.

remove mobile malware
Related articles:
How to remove malware and viruses from your mobile phone: Complete Guide for Android and iOS