If someone hacks your WhatsApp, immediately log out the hacker by logging back into your account with the verification code, enable two-step verification, inform your contacts, report the incident to WhatsApp, and file a complaint through the National Cyber Crime Reporting Portal or by calling the cybercrime helpline (1930). If money has been stolen or sensitive information has been misused, report the matter to the local police without delay.
Detailed Explanation
A hacked WhatsApp account means an unauthorized person has gained access to your account or is using it without your permission. This can happen through OTP fraud, SIM swapping, phishing links, QR code scams, or by stealing your phone.
Since WhatsApp often contains personal chats, financial information, business conversations, and private documents, unauthorized access can lead to identity theft, financial fraud, blackmail, or misuse of personal data.
What Should You Do Immediately?
| Step | What You Should Do |
|---|---|
| Step 1 | Log back into WhatsApp using your registered mobile number. Enter the six-digit verification code received by SMS. This automatically logs out the hacker from most devices. |
| Step 2 | If a two-step verification PIN has been enabled by the hacker, wait for the recovery period or contact WhatsApp Support immediately. |
| Step 3 | Enable Two-Step Verification from WhatsApp Settings → Account → Two-Step Verification. |
| Step 4 | Inform your family, friends, colleagues, and clients that your account was compromised so they do not fall victim to fraud. |
| Step 5 | Check WhatsApp Linked Devices and remove any unknown device. |
| Step 6 | Change passwords of email accounts and banking apps if they were shared through WhatsApp. |
| Step 7 | File a cybercrime complaint if personal information or money has been misused. |
Common Ways WhatsApp Accounts Get Hacked
- Sharing the OTP with someone claiming to be from WhatsApp.
- Scanning a fake WhatsApp Web QR code.
- Clicking phishing or malicious links.
- Installing fake WhatsApp applications.
- SIM card swapping by fraudsters.
- Malware on your mobile phone.
What Happens Legally?
Hacking someone else’s WhatsApp account is a cyber offence in India. Depending on how the account was accessed and used, the offender may face criminal action for unauthorized access, cheating, identity theft, impersonation, or data theft.
If the hacker uses your account to demand money, threaten others, circulate obscene material, or commit fraud, the investigating agency may trace the digital evidence through mobile records, IP addresses, and other electronic evidence.
Where Should You Report the Incident?
You should report the incident as soon as possible through the following channels:
| Authority | Purpose |
|---|---|
| National Cyber Crime Reporting Portal | Report hacking, online fraud, identity theft, and cyber offences. |
| Cybercrime Helpline (1930) | Immediate reporting, especially in financial fraud cases. |
| Local Cyber Police Station | Register a formal complaint and begin investigation. |
| Local Police Station | File a complaint if a cyber police station is not available nearby. |
| WhatsApp Support | Recover the account and report unauthorized access. |
What Information Should You Keep Ready?
While filing a complaint, keep the following details ready:
- Your registered mobile number.
- Screenshots of suspicious chats or messages.
- Date and time when the hacking occurred.
- Details of any financial loss.
- Names and phone numbers of suspected persons, if known.
- Email communication received from WhatsApp.
Example
Suppose you receive a call from someone pretending to be a customer support executive who asks for your WhatsApp OTP. After sharing the OTP, you lose access to your account. The fraudster then asks your contacts to transfer money.
In this situation, you should immediately log back into WhatsApp, inform all your contacts, report the fraud on the National Cyber Crime Reporting Portal, and lodge a police complaint. Quick reporting increases the chances of preventing further fraud.
Key Points / Important Facts
- Never share your WhatsApp verification OTP with anyone.
- Enable Two-Step Verification for additional security.
- Check Linked Devices regularly.
- Report cyber fraud immediately through the cybercrime helpline (1930).
- Preserve screenshots and digital evidence.
- Inform your contacts if your account has been compromised.
- Change passwords of connected accounts if sensitive information was shared.
- Financial fraud should be reported immediately to improve recovery chances.
Legal Provision or Section
Information Technology Act, 2000
The Information Technology Act, 2000 is the primary law dealing with cyber offences in India.
Section 43 provides compensation for unauthorized access, downloading, or damage to computer resources.
Section 66 makes dishonest or fraudulent unauthorized access punishable as a criminal offence.
Section 66C punishes identity theft involving passwords, digital signatures, or unique identification information.
Section 66D deals with cheating by personation using computer resources or communication devices, including online impersonation scams.
Depending on the facts, provisions of the Bharatiya Nyaya Sanhita, 2023 (BNS) relating to cheating, criminal intimidation, extortion, forgery, or other offences may also apply if the hacked account is used to commit further crimes.
Important Supreme Court / High Court Judgments
Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)
The Supreme Court recognized the Right to Privacy as a fundamental right under the Constitution. Unauthorized access to personal digital communications can violate an individual’s privacy.
Shreya Singhal v. Union of India (2015)
The Supreme Court struck down Section 66A of the Information Technology Act while reaffirming that other valid provisions of the Act continue to apply against genuine cyber offences, including hacking and identity theft.
Frequently Asked Questions (FAQs)
1. Can I recover my hacked WhatsApp account?
Yes. In many cases, you can recover your account by logging in again using your registered mobile number and verification code. If recovery is delayed because a hacker has enabled two-step verification, contact WhatsApp Support immediately.
2. Is hacking someone’s WhatsApp account a crime in India?
Yes. Unauthorized access to another person’s WhatsApp account may amount to offences under the Information Technology Act, 2000 and, depending on the circumstances, relevant provisions of the Bharatiya Nyaya Sanhita, 2023.
3. Should I file an FIR if my WhatsApp is hacked?
If the hacking has resulted in financial loss, identity theft, blackmail, or misuse of your personal information, you should file a complaint with the cyber police or local police without delay.
4. Can the police trace the hacker?
Yes. During an investigation, law enforcement agencies may collect digital evidence such as IP addresses, device information, mobile records, server logs, and electronic evidence to identify the offender, subject to the facts of the case.
5. What if the hacker has already asked my contacts for money?
Immediately inform all your contacts not to send money, report the fraud through the cybercrime helpline (1930), and preserve screenshots and transaction details for investigation.
6. How can I protect my WhatsApp account from hacking?
Enable Two-Step Verification, never share your OTP, avoid clicking unknown links, verify QR codes before scanning, keep your phone updated, and regularly review linked devices.
Conclusion
If someone hacks your WhatsApp account, act immediately to regain access, secure your account, and prevent further misuse. Reporting the incident quickly to WhatsApp and the Indian cybercrime authorities can reduce the risk of financial loss and improve the chances of identifying the offender. If the hacking involves fraud, identity theft, or other criminal activity, you should also file a police complaint and preserve all available digital evidence.
Sources & References
- Ministry of Home Affairs – National Cyber Crime Reporting Portal
https://cybercrime.gov.in/ - Indian Cyber Crime Coordination Centre (I4C)
https://i4c.mha.gov.in/ - Information Technology Act, 2000
https://www.meity.gov.in/ - WhatsApp Safety and Security Centre
https://www.whatsapp.com/security
Explore Question Categories
Prabh Kalsi provides global legal information and educational content to help readers understand legal concepts, rights, and processes across different countries. With experience in researching legal topics and simplifying complex legal information, he creates easy-to-understand content based on publicly available and trusted sources. This content is intended for informational purposes only.