Pakistan’s National Cyber Emergency Response Team has warned that WhatsApp accounts are being hacked more frequently. Scammers are using simple tricks to take control of accounts, steal data, and cheat people by pretending to be someone they trust.
WhatsApp Hacking Threat Is Growing
The National Cyber Emergency Response Team of Pakistan, commonly known as National CERT or NCERT, has released a new advisory about a sharp rise in WhatsApp account hijacking cases. According to NCERT, the threat is active, widespread, and affecting both individuals and organizations.
Attackers are no longer relying on complex hacking tools. Instead, they are using social engineering. This means they trick users into giving away access themselves. Once hackers take over a WhatsApp account, they can read messages, impersonate the user, and scam friends, family members, or colleagues.
Because WhatsApp is linked directly to a phone number and SIM card, a single mistake can give attackers full control of an account.
How Hackers Take Control of WhatsApp Accounts
NCERT explained that most attacks succeed because users unknowingly share sensitive information. Below are the most common methods currently being used.
| Attack Method | How It Works | Main Risk |
|---|---|---|
| OTP Scams | Users are tricked into sharing the 6-digit WhatsApp verification code | Full account takeover |
| Call Forwarding Fraud | Victims dial USSD codes that forward calls to attackers | Verification codes intercepted |
| Phishing Links | Fake websites ask users to enter WhatsApp details | Credential theft |
| QR Code Scams | Malicious QR codes link WhatsApp to hacker-controlled devices | Silent access to chats |
These attacks often look harmless at first, which is why many people fall for them.
Warning Signs That Your WhatsApp May Be Compromised
NCERT also shared clear indicators that suggest a WhatsApp account may already be hacked.
| Warning Sign | What It Means |
|---|---|
| Unexpected logout from WhatsApp | Someone else logged in |
| Messages sent that you did not write | Account is being misused |
| Unknown devices in “Linked Devices” | Hacker has linked their device |
| Two-step verification prompts you did not request | Attacker trying to lock you out |
| Call forwarding enabled without permission | Verification calls redirected |
If you notice any of these signs, NCERT advises acting immediately.
What To Do If Your WhatsApp Is Hacked
NCERT outlined an official recovery process for affected users.
- Reinstall WhatsApp on your phone
- Verify your phone number again
- This step removes attackers from the account instantly
However, there is one important exception.
If the attacker enables two-step verification and does not add a recovery email, WhatsApp enforces a seven-day lockout. During this period, no one can access the account. After seven days, the original user can reset the PIN and regain full control.
How To Protect Your WhatsApp Account
NCERT strongly recommends the following safety steps for all users.
| Security Step | Why It Matters |
|---|---|
| Enable two-step verification | Adds an extra security layer |
| Add a recovery email | Helps reset access quickly |
| Check linked devices regularly | Detects unauthorized access |
| Never share OTP or PIN | Prevents instant hijacking |
| Be cautious of urgent money requests | Common scam tactic |
For businesses and organizations, NCERT also advised staff training, strict confirmation for financial requests, and quick incident response plans.
FAQs
Can WhatsApp be hacked without my phone?
Yes. If you share your verification code, scan a fake QR code, or enable call forwarding, attackers can access your account remotely.
Will reinstalling WhatsApp delete my data?
Chat history stored locally may be lost unless backed up. However, reinstalling is the fastest way to remove hackers.
Is two-step verification really necessary?
Yes. NCERT considers it one of the most effective protections against account hijacking.
Can hackers read old messages?
If your account is linked to their device, they may access messages after the takeover. End-to-end encryption still protects past messages on your phone.
How long does account recovery take?
In most cases, recovery is immediate. If two-step verification is abused, recovery may take seven days.
Conclusion
NCERT’s warning makes it clear that WhatsApp hacking is no longer rare. Most attacks succeed because of small mistakes like sharing a code or clicking a fake link. By enabling two-step verification, staying alert, and acting quickly when something feels wrong, users can protect their accounts and their contacts.
WhatsApp is a trusted communication tool. Keeping it secure is now a shared responsibility between users and awareness.
Rana Shahriyar is a dedicated content writer and contributor at 8171 Rashan Program. With a strong interest in social welfare programs and government initiatives, his work focuses on delivering clear, reliable, and easy to understand information for the public.