If your WhatsApp is hacked, reinstall or open WhatsApp, register your own number and enter the six-digit SMS code: that logs the hacker out of the phone. If WhatsApp then asks for a two-step verification PIN you did not set, reset it by email if you can, or wait the official seven days before you can register without it. In Pakistan, report the hack and any money fraud to the National Cyber Crime Investigation Agency (NCCIA) on helpline 1799 or its online complaint portal.
Last checked: 20 October 2026. Sources are linked in the text.
Never share your six-digit registration code or your two-step verification PIN with anyone, including people who claim to be WhatsApp support, a relative, a courier or a bank. That code is exactly how most accounts are stolen.
Act immediately: Step 1, reclaim your WhatsApp number
Register your number and enter the six-digit code
- Open WhatsApp on your phone. If it shows you are logged out, tap Log back in or reinstall the app.
- Enter your full number with the country code (+92 for Pakistan).
- Enter the six-digit code that arrives by SMS or call.
When you verify your number, the person using your account on another phone is logged out, as WhatsApp explains in its official account-compromise guidance. If WhatsApp now asks for a PIN, go to Step 2.
If your SIM stopped working, contact your mobile carrier
If the SIM suddenly shows “No service” or “SIM not provisioned”, someone may have got a duplicate SIM on your number. Call or visit your operator (Jazz, Zong, Telenor or Ufone) straight away, say you suspect an unauthorised SIM replacement, and follow their biometric verification. You cannot get the WhatsApp code until the number is back in your hands. Not sure which number is on which SIM? See how to check your Jazz, Zong, Telenor or Ufone SIM number.
Step 2: Get past a two-step verification PIN you didn’t set
Follow WhatsApp’s official account-recovery request process
Hackers often turn on two-step verification so you cannot get back in. On the PIN screen, tap Forgot PIN?. If a recovery email is linked and you control it, request the reset email and follow the link (two-step verification reset guidance).
When the official seven-day wait applies
If the hacker set the PIN and the email, or no email is linked, you must wait seven days from the PIN prompt before WhatsApp lets you register without the PIN. WhatsApp support cannot shorten this. Anyone who offers to “bypass” it for a fee is running a second scam. Keep the phone and SIM with you during the wait, because you still need the SMS code at the end.
Step 3: Restore chats only from a backup you can access
Check the Google Drive or iCloud backup before reinstalling
Chat restore only works with the same phone number and the same Google account (Android) or Apple Account/iCloud (iPhone) that made the backup (chat-history restoration guidance). Check the backup date in WhatsApp settings or your cloud account before you delete or reinstall anything.
Understand what a backup can and cannot recover
Messages newer than your last backup may be lost. Restoring a backup does not undo anything the hacker already read or sent. Do not clear app data or factory reset while you still have recovery options.
How long does WhatsApp account recovery take?
| Situation | What determines the timing |
|---|---|
| You receive the registration code and have no PIN barrier | You can proceed with self-recovery immediately. |
| An unknown PIN blocks you, with no usable email reset | WhatsApp requires the official seven-day wait. |
| Your SIM or number is outside your control | Your mobile operator must help restore number access first. |
| You need WhatsApp support | Response times vary by issue; there is no guaranteed response window. |
Step 4: Report the hack and check for SIM fraud in Pakistan
Use the verified NCCIA reporting channel
Cybercrime complaints in Pakistan now go to the National Cyber Crime Investigation Agency (NCCIA), not the old FIA Cyber Crime Wing. The government set up NCCIA under section 51 of the Prevention of Electronic Crimes Act 2016 (PECA) in May 2024, and it took over the FIA cyber wing’s role and cases (overview citing Dawn). Older guides that send you to the FIA cybercrime portal are out of date.
- Helpline: dial 1799. Interior Minister Mohsin Naqvi inaugurated the NCCIA helpline centre on 3 June 2025 (ProPakistani; government confirmation in a PID press release).
- Online complaint: use the NCCIA complaint portal at complaint.nccia.gov.pk. Check that the address ends in nccia.gov.pk before entering your CNIC.
- Official website: nccia.gov.pk.
Keep this evidence ready: screenshots of the hacker’s messages, the phone numbers involved, payment requests, transaction IDs, dates and times, and your CNIC. NCCIA is busy. It received 77,023 cybercrime complaints between January and May 2026, according to figures given in the National Assembly (Journalism Pakistan), so a clear, complete complaint helps.
If money left your account, call your bank or wallet helpline first to try to block or reverse it, then file with NCCIA. Our Easypaisa vs JazzCash: which wallet is safer for your money guide covers wallet security settings.
Treat suspected SIM fraud as a separate problem
A duplicate SIM issued without your knowledge is a problem with your operator, not WhatsApp. Report it to the operator in writing and mention it in your NCCIA complaint. If you are switching to eSIM to make SIM theft harder, see how to convert a physical SIM to eSIM on iPhone.
Step 5: Secure the account and warn your contacts
- Go to Settings > Linked devices and log out of every device you do not recognise.
- Turn on two-step verification with a new PIN you have never shared, and add a recovery email you control.
- Secure that email account with a strong password and its own two-factor login.
- Message your contacts through another channel (SMS, a call or a family group on another app): any payment requests from your WhatsApp during the hack were not from you.
- If you earn online, check your payment accounts too. See move Payoneer money to JazzCash or Easypaisa safely.
Scammers also impersonate government offices on WhatsApp. Before replying to any “NADRA” or “PTA” message, check the official numbers, such as the ones in our NADRA WhatsApp number guide.
Quick answers about recovering a hacked WhatsApp account
How long does WhatsApp account recovery take?
Immediately if you get the SMS code and no PIN blocks you. If an unknown PIN blocks you and you cannot reset it by email, WhatsApp makes you wait seven days.
Can I recover my account without losing my chats?
Yes, if you have a Google Drive or iCloud backup on the same number and the same cloud account. Messages after the last backup may be lost.
What if the hacker changed my linked email?
Then the email reset will not work for you. Keep your number active and wait the seven days, then register again.
Should I report this in Pakistan?
Yes, especially if money was requested or taken. Call NCCIA on 1799 or file at complaint.nccia.gov.pk with screenshots and transaction details.
Can the FIA still take my cybercrime complaint?
Cybercrime work moved from the FIA Cyber Crime Wing to NCCIA. Use NCCIA’s helpline and portal so your complaint reaches the right agency.
How did my WhatsApp get hacked?
Most often someone tricked you into sharing the six-digit code, or got a duplicate SIM on your number. Check Linked devices too, in case someone linked WhatsApp Web to your account.
Final word: recover access, then secure it
Get your number back first, then the account, then your chats. Once you are in, turn on two-step verification with a recovery email, clear unknown linked devices and report the incident to NCCIA. If WhatsApp support is needed, use its official support guidance from inside the app.
Sources
- WhatsApp Help Center: Stolen or compromised accounts
- WhatsApp Help Center: Two-step verification reset
- WhatsApp Help Center: Restore chat history
- WhatsApp Help Center: Contact support
- PID: NCCIA 1799 helpline press release
- ProPakistani: Cyber helpline 1799 launched
- NCCIA online complaint portal
- National Cyber Crimes Investigation Agency (overview, citing Dawn)
- Journalism Pakistan: cybercrime complaints in 2026
