When an Employee's WhatsApp Is Hacked
A staff member's WhatsApp is taken over and starts messaging colleagues and clients. A step-by-step response: recover the account, warn people, check payments and prevent repeats.
CyberWatch AI3 October 2026 · 2 min read
A client calls to ask why your sales manager wants payment to a new account. Colleagues report being asked for codes. An employee's WhatsApp has been taken over, and the attacker is using their trusted position.
Response checklist
- Recover the account: the employee re-registers their number. See account recovery.
- Remove the account from work groups until it is secured.
- Warn colleagues not to reply, pay or share codes.
- Warn clients the employee deals with, by email or phone.
- Check payments: were any made or changed because of messages from that account? Call the bank at once if so.
- Check for spread: did any colleague share a code? Their accounts may be next.
A short client notice
Template · Copy and adapt
Please be aware that [name]'s WhatsApp was compromised today. Please ignore any requests from that account for payments, codes or changed bank details. Our payment details have not changed. If in doubt, call us on [number].
Be clear, short and give a verified way to check.
Prevent repeats
- Require two-step verification on accounts used for work.
- Train staff on the code scam. See staff training.
- Move client communication to a business-owned number. See personal WhatsApp for work.
For more, see our guide to WhatsApp scams.
Frequently asked questions
What is the first thing to do?
Help the employee re-register their number to log the attacker out, and warn colleagues and clients not to act on messages from that account.
Should we remove them from work groups?
Temporarily, yes, until the account is recovered and secured.
How do we stop it happening again?
Require two-step verification on accounts used for work, and train staff never to share codes.
Sources
- How to recover a compromised account, WhatsApp Help Center
- About two-step verification, WhatsApp Help Center
- Small organisations guide to cyber security, UK National Cyber Security Centre
