Voicemail Hacking and WhatsApp Voice Call Verification
Scammers can ask WhatsApp to read your registration code by voice call, then break into your voicemail to hear it. How the voicemail hack works and how to lock your voicemail.
WhatsApp can deliver your registration code by phone call as well as by text. Attackers use this. They request a voice code at a time you are unlikely to answer, such as the middle of the night, so the call goes to voicemail. Then they break into your voicemail to hear the code.
How it works
- The attacker starts registering WhatsApp with your number.
- They choose "call me" for the code, while you are asleep or busy.
- The automated call goes to your voicemail and leaves the code.
- They access your voicemail, often using a default or easily guessed PIN, and listen to it.
- They enter the code and take over your WhatsApp.
How to stop it
- Turn on two-step verification. The code alone is then useless. See how.
- Change your voicemail PIN to something strong and unique. Your mobile network explains how.
- Turn off voicemail if you never use it. Ask your network.
- Protect your number from being moved to another SIM. See protecting your phone number.
Missed an automated call about a WhatsApp code? Treat it like an unrequested text code: someone may be trying to register your number. See what to do.
Signs it happened
- WhatsApp logs you out unexpectedly.
- A voicemail from an automated number you do not recognise, or voicemails marked as heard that you never played.
- Friends receiving odd requests from your account.
If so, follow WhatsApp account recovery.
For more, see WhatsApp scams and how to protect your account.
Frequently asked questions
How can someone get into my voicemail?
Many voicemail boxes have a default or simple PIN, and some can be reached from other phones. Attackers try common PINs to listen to messages.
How do I change my voicemail PIN?
Your mobile network explains how, usually through a short code, the voicemail menu or its app. Choose a PIN that is not your birthday or the end of your phone number.
Does two-step verification stop this?
Yes. Even if someone hears your code, they also need your PIN.
Sources
- About two-step verification, WhatsApp Help Center
- Received verification code without requesting it, WhatsApp Help Center
- Account security tips, WhatsApp Help Center
