It usually starts with a message from a “friend”: “I sent you a code by mistake, please send it back.” That code was your WhatsApp registration code, and now someone else is logged in as you, asking your contacts for money. The Cyber Security Authority has warned that WhatsApp account takeovers are among the biggest cyber threats facing Ghanaians.
Step 1: Re-register your number now
WhatsApp is clear: the only way to remove someone from your account is to re-register it with the six-digit code sent to your phone. Changing a password will not do it.
- Open WhatsApp on your phone. If you were logged out, tap Log back in, then Continue.
- Enter your full phone number and tap Next, then OK.
- Enter the six-digit code you receive by SMS or phone call.
As soon as you verify, the other person is logged out. You need the SIM card for your number: WhatsApp says an account cannot be recovered without it. If your SIM is lost or damaged, get a replacement from your network first.
Step 2: If they turned on two-step verification
If the hacker set a two-step PIN, WhatsApp will ask for it. Without it, you may have to wait several days before you can reset access. Keep your SIM in your phone and try again when the app allows it. Meanwhile, warn your contacts straight away (Step 3).
Step 3: Warn your contacts
The hacker may still be using your name in chats and groups, or may have saved your contacts. Tell people through another channel (SMS, a call, Facebook, a family member’s status) not to send money or codes to “you”.
Step 4: Lock the account down
- Turn on two-step verification with your own PIN and an email address. See turn on WhatsApp two-step verification.
- Check linked devices and log out of any you do not recognise. See check who is linked to your WhatsApp.
- Never share your six-digit code with anyone, for any reason.
What the hacker can and cannot see
WhatsApp says the person cannot read your past messages, because they are stored on your device. They can see new messages sent while they control the account, and they can message your contacts and groups as you.
If money was lost
- Contact the bank or MoMo provider of anyone who sent money, with the transaction details, straight away.
- Report to the police and the Cyber Security Authority.
Your six-digit code is your WhatsApp key. Anyone who asks for it wants your account.
This guide was checked in October 2026. Menus and services change, so if something looks different on your phone, check with your provider.
Common questions
Can changing my password remove a hacker from WhatsApp?
No. WhatsApp says the only way to remove someone is to re-register your number with the six-digit code sent to your phone.
Can the hacker read my old messages?
WhatsApp says the person cannot read your past messages, which are stored on your device. They can see new messages while they control the account.
The hacker set a two-step PIN. What now?
You may have to wait several days before you can reset access without the PIN. Keep your SIM, warn your contacts, and try again when WhatsApp allows it.
How did they get my account?
Usually by tricking you into sharing the six-digit registration code, often while pretending to be a friend or a promotion.
