How to Secure Your WhatsApp Account Against Takeover Scams

WhatsApp is an everyday communications tool for families, workers and small businesses across Africa. That makes it attractive to criminals trying to take over accounts and impersonate people their contacts trust.

Account takeover often begins with a simple trick: the victim is persuaded to share a registration code, scan an unfamiliar QR code or approve access they did not request. Once an attacker gains access, they may contact friends or customers asking for emergency payments.

Protect your registration code

Never share a WhatsApp registration code or PIN, even with someone claiming to be support staff. A code sent to your number is meant for your registration process, not for a third party.

Enable two-step verification

Open WhatsApp settings, find the Account section and enable two-step verification where the option is available. Choose a PIN you do not reuse. Add a recovery email you control if the app offers that option, and keep the email account itself secure.

Check linked devices

Review the Linked Devices area regularly and sign out any browser or computer you do not recognise. Avoid scanning QR codes sent by strangers or shown on suspicious websites.

Protect your phone and email

Use a screen lock and keep your phone operating system and apps updated. Secure the email address associated with your account with a strong password and multi-factor authentication. These layers cannot eliminate scams, but they make common takeover attempts harder.

Watch for social engineering

Be cautious when a contact abruptly asks for money, even when the request arrives through an existing conversation. Verify unusual payment instructions through a separate phone call or another trusted channel.

If you lose access

Attempt to register your phone number again using the official app and follow WhatsApp's recovery guidance. Inform your contacts through another channel that suspicious messages may be fraudulent. Contact your mobile operator if you suspect SIM swapping, and report financial losses promptly to the relevant provider and authorities.

What not to do

Do not pay unverified account-recovery agents or enter your codes on unofficial websites. Use the official WhatsApp application and Help Center for recovery information.

The most effective defence is straightforward: keep registration codes private, monitor linked devices and verify unexpected requests for money. Features and menu labels may differ by version or device.