Account recovery
What to do if your WhatsApp account is compromised
A calm response guide for people in Pakistan: protect contacts, use official WhatsApp recovery, review linked access and plan the next steps.
First, separate the possibilities
Being unexpectedly signed out, seeing messages you did not send and receiving a registration code you did not request are different events. A registration attempt alone does not prove someone has read your messages. Write down what you observed, when it started and whether you still control your phone number and the app.
Keep the first record simple. Record affected accounts and actions taken without forwarding private conversations widely. Do not send screenshots containing identity documents, bank details or other people's messages to someone offering unsolicited help. Avoid public posts that disclose the incident before you have considered who needs to know.
Warn the people who could be affected
Use another contact method to tell close contacts that unusual requests from your account may not be genuine. A short warning is enough: ask them to verify any request through a number or person they already know. Do not forward the suspicious request with an active payment or login link.
Consider the account's real relationships. A messaging identity may reach relatives, employees, school groups and business contacts. Prioritise people who might act quickly on a request from you. Give one trusted person a clear role if they are helping, so several well-meaning relatives do not attempt conflicting recovery actions at once.
Use the official recovery process
Open the official WhatsApp app and follow its recovery or registration process for your own number. WhatsApp's guidance says that re-registering with the six-digit code signs out devices using that account. Never give that code to someone who offers to recover the account for you.
If an unfamiliar two-step verification PIN or a waiting period appears, follow the instructions in the app and WhatsApp Help Center. Do not guess repeatedly or pay anyone promising to bypass the platform's controls. Exact recovery options depend on the account and can change; the linked official recovery page takes precedence over an old screenshot or guide.
If your telephone number is also affected
Loss of mobile service at the same time deserves separate attention. Contact your mobile operator through its official app, website or a known service channel to establish whether the number is under your control. Do not rely on a support number sent by the person contacting you.
Keep account recovery and any payment issue as separate workstreams. If someone acted on an impersonated payment request, the affected person should contact their payment provider through a verified channel. This guide does not promise account recovery or reversal of a transaction. Those decisions sit with the relevant providers.
After you regain access
Review linked devices and remove sessions you do not recognise. Check security and recovery settings, including the email address used for recovery. Use the account protection options currently offered in the app, such as two-step verification or a passkey where available. Keep recovery information under your control.
Tell affected contacts when you have regained control, while asking them to continue verifying unusual requests. Review whether the same person could approach you through email, another social account or a relative. Recovering one account does not automatically resolve every exposure around it.
Make the next incident easier to handle
Agree one alternate contact method with the people most likely to receive urgent messages from you. Record where official provider help is found. Revisit the plan after changing a phone, mobile number or recovery email, and when household members begin using new devices.
If the situation involves several accounts or you are unsure what to prioritise, begin a confidential incident-support conversation. Describe the concern in general terms. CyberImperials can discuss an agreed scope of support for private clients in Pakistan, without requesting sensitive evidence in the initial enquiry or guaranteeing a provider-controlled outcome.
Discuss personal incident support or request a confidential consultation.