WhatsApp takeovers usually start with a message from a 'friend' asking you to forward a 6-digit code. That code is your login. Once they have it, they register your number on their phone and lock you out.

Recover it in order

  • Open WhatsApp and register your number again. You'll get a fresh SMS code — entering it logs the attacker out.
  • Turn on two-step verification: Settings → Account → Two-step verification.
  • Check Settings → Linked devices and log out anything you don't recognise.
  • Message your contacts: tell them not to send money to anyone using your account.

If the attacker set a two-step PIN

You may have to wait up to 7 days before you can reset without it. Keep all evidence and report it. Drofsecurity's emergency flow walks you through this and drafts a complaint for you.