Your phone buzzes. A six-digit code arrives by text message. You did not request it.
Someone is trying to break into your WhatsApp.
For expats living in Bali, where WhatsApp is the primary communication tool for villa rentals, restaurant bookings, driver services, and community groups, a hacked account is not just an inconvenience. It is a security risk that can lead to financial loss, identity theft, and compromised personal data.
The good news is that the signs are easy to spot. The better news is that you can stop it.
Six Signs Your WhatsApp Is Compromised
1. You receive an unexpected OTP code.
A One Time Password (OTP) is sent via SMS when someone tries to register your phone number on a new device. If you get one without requesting it, someone is attempting to take over your account. Never share this code with anyone.
2. You are suddenly logged out.
If WhatsApp closes unexpectedly and asks you to log in again, another device may have taken control. Check which devices are connected by tapping the three dots, selecting “Linked Devices,” and reviewing the list.
3. Messages are marked as read when you have not opened them.
A message that appears read despite you never viewing it is a strong indicator that someone else has access to your account.
4. Messages are sent from your account that you did not write.
If friends or family receive strange messages from your number, and you never typed them, your account is compromised.
5. You see status updates you did not post.
A foreign status update appearing on your profile means someone else is inside your account.
6. Calls are made from your WhatsApp that you did not make.
Check your call history. If you see outgoing calls you do not recognize, act immediately.
How to Stop It
If you notice any of these signs, time is critical.
First, deactivate your account immediately. Send an email to support@whatsapp.com with the subject line “Lost/stolen: please deactivate my account.” Include details about when and how you believe the hack occurred. You have 30 days to reactivate before the account is permanently deleted.
Second, reinstall WhatsApp. Uninstall the app, then install it again using your registered phone number. You will receive a new OTP code. Do not share it with anyone.
Third, enable two-step verification. This is the single most effective protection against hacking. Go to Settings > Account > Two-step verification > Enable. Create a six-digit PIN that only you know. WhatsApp will ask for this PIN whenever someone tries to register your number on a new device — even if they have your OTP code.
Fourth, lock your WhatsApp screen. On Android, go to Settings > Privacy > Screen lock. Use fingerprint or face recognition to secure the app itself. This prevents anyone who has physical access to your phone from opening WhatsApp without your permission.
Fifth, regularly check linked devices. Go to Settings > Linked Devices. If you see any device you do not recognize, tap “Log out” immediately.
Why This Matters in Bali
Expats and tourists in Bali rely on WhatsApp for almost everything. Villa owners send rental agreements. Drivers confirm pickups. Restaurants take orders. Community groups share urgent information. A hacked account can lead to fake messages asking for money, stolen photos, and compromised conversations with local businesses who trust your number.
The hackers are not targeting you personally. They are targeting anyone who has not enabled two-step verification.
Turn it on now. Before that unexpected OTP code arrives.
