For many Ugandans, WhatsApp is where business happens: orders, payments, family news, church announcements and SACCO updates. That is exactly why criminals want to take over WhatsApp accounts. Once inside, they message your contacts asking for money, spread scams in your name and read private conversations. This guide explains how to protect your WhatsApp from being hacked, step by step, and what to do if you lose control of your account.
How WhatsApp accounts get hacked in Uganda
Most WhatsApp "hacks" are not technical genius. They are tricks that get you to hand over access. The most common methods are:
- The six digit code scam. You receive an SMS with a WhatsApp verification code, followed by a message from a "friend" saying they sent it to you by mistake and asking you to forward it. That code lets the scammer register your number on their phone.
- Fake support messages. Someone pretending to be from WhatsApp, a telecom or a promotion asks for your code or PIN to "verify" or "upgrade" your account.
- WhatsApp Web hijacking. Someone with brief access to your unlocked phone scans a QR code to link your WhatsApp to their computer.
- Voicemail attacks. Scammers request the verification code by voice call while your phone is off or busy, and if your voicemail has a default or weak PIN, they retrieve the code.
- Malicious apps and links. Unofficial "WhatsApp plus" or "GB WhatsApp" style apps, or links promising free data, can expose your account and phone.
- SIM swap fraud. A criminal convinces someone to issue a replacement SIM for your number, then receives your codes.
Step 1: Turn on two step verification
This is the single most important setting. It adds a six digit PIN that you choose, which is required when your number is registered on a new phone.
- Open WhatsApp and go to Settings.
- Tap Account, then Two step verification.
- Tap Turn on and create a six digit PIN you will remember, but that is not your birth year or Mobile Money PIN.
- Add an email address so you can reset the PIN if you forget it. Use an email you actively check.
Even if someone tricks you into sharing an SMS code, they still need this PIN.
Step 2: Add a passkey or extra login protection
On supported phones, WhatsApp allows passkeys, which let you verify your account with your fingerprint, face or screen lock instead of relying only on SMS. Check under Settings, Account, Passkeys. Where available, it adds an extra barrier against code theft.
Step 3: Never share your verification code
Make this a household and office rule: no one ever needs your WhatsApp code. Not a friend, not "WhatsApp support", not a telecom agent, not a promotion. If you receive a code you did not request, someone is trying to register your number. Ignore any message asking for it, and warn the contact who asked, because their account may already be hacked.
Step 4: Lock your phone and the app
- Set a strong screen lock: a PIN of at least six digits, a fingerprint or face unlock.
- Turn on WhatsApp's own app lock. On Android, go to Settings, Privacy, App lock. On iPhone, go to Settings, Privacy, Screen lock.
- Use chat lock for very sensitive conversations, which hides them in a protected folder.
Step 5: Check linked devices regularly
Open Settings, then Linked devices. You will see every computer or tablet connected to your account. If you see something you do not recognise, tap it and select Log out. Make checking this a weekly habit, especially if you have used WhatsApp Web on a shared office or cyber cafe computer.
Step 6: Secure your voicemail and SIM
- If voicemail is active on your line, change the default PIN or ask your network to disable voicemail if you do not use it.
- Protect your SIM. Ask your telecom provider about a SIM PIN or other protection, and keep your registration details up to date.
- If your phone suddenly loses network for no reason and shows "No SIM" or "Emergency calls only", contact your network immediately in case of a SIM swap attempt.
Step 7: Use only the official app
Download WhatsApp and WhatsApp Business only from the Google Play Store or Apple App Store. Modified versions may offer extra features but they are not secure, and WhatsApp may ban accounts that use them. Keep the app updated, since updates fix security weaknesses.
Step 8: Tighten your privacy settings
- Under Privacy, set Profile photo, About and Last seen to "My contacts".
- Set Groups to "My contacts" so strangers cannot add you to scam groups.
- Turn on "Silence unknown callers" to reduce scam calls.
- Be careful about posting your number publicly alongside your full name.
Step 9: Back up your chats securely
Turn on chat backups to Google Drive or iCloud and enable end to end encrypted backup, which protects the backup with a password or key. That way, if you have to reinstall WhatsApp after a hack, you can restore your conversations.
What to do if your WhatsApp is hacked
- Re register immediately. Reinstall or open WhatsApp on your phone and verify your number with the SMS code. This logs the attacker out from their device, unless they have set up two step verification on your account.
- If they set a two step PIN, you may need to wait the period WhatsApp specifies before you can register without it. Keep trying to verify during this time.
- Warn your contacts through SMS, a status from another account, or calls, telling them not to send money or codes.
- Email WhatsApp support from the app or website explaining that your account was stolen, including your number in international format.
- Contact your network if you suspect SIM swap.
- Report fraud to the police if money was lost, and inform your Mobile Money provider quickly so they can investigate.
Extra tips for WhatsApp Business users
Businesses are prime targets because customers send them money. Use a dedicated business phone, limit who knows the two step PIN, and publish your official number on your website so customers can confirm they are talking to you. Ask customers to pay only to till numbers or accounts in your business name and to call back on your listed number if anyone requests a change.
Frequently asked questions
Can someone hack my WhatsApp with just my number?
Not on its own. They need the verification code, your two step PIN or access to your phone. That is why protecting codes and turning on two step verification matters so much.
Can hackers read my messages?
WhatsApp messages are end to end encrypted in transit. However, anyone who controls your account or phone can read chats on that device, and new messages after a takeover.
How do I know if my WhatsApp is linked to another device?
Check Settings, Linked devices. WhatsApp also sends a notification when a new device is linked.
Conclusion
Protecting WhatsApp comes down to a few strong habits: turn on two step verification, never share codes, lock your phone and app, check linked devices and use only the official app. Share this guide with family members and staff, especially those less familiar with technology, because one compromised account can put a whole network of contacts at risk.