WhatsApp cloned? How to know and what to do

Find out how to identify if your WhatsApp has been cloned in 2023 and find out what measures to take to protect your data.

WhatsApp is an instant messaging application widely used around the world, which allows the exchange of messages, photos, videos and documents. But unfortunately, as usage has increased, so has the number of cyber attacks, including account cloning.

So, if you are wondering “Was my WhatsApp cloned? How to know and what to do in 2023?”, continue reading this article to find out how to identify cloning and how to protect your account.

How do I know if my WhatsApp has been cloned?

There are some signs that indicate that your WhatsApp account may have been cloned. Here are some of them:

1. Strange messages appear in your conversation: If you notice strange or suspicious messages in your conversation, it could be a sign that your account has been compromised.
2. Active session on another device: If you notice that there is an active session on another unknown device, it is likely that your account has been cloned.
3. Problems when trying to connect: If you have trouble logging into your account, it could be a sign that your account has been hacked.
4. Not receiving messages: If you're not receiving messages that were sent to you, it could be a sign that your account has been cloned.

What to do if my WhatsApp has been cloned?

If you believe your WhatsApp account has been cloned, it's important to take steps to protect your account. Here are some suggestions:

1. Enable two-step authentication: This is an important security measure that helps protect your account by adding an extra layer of security.
2. Change your account password: If your account has been cloned, changing your password is the first thing you should do.
3. Contact WhatsApp support: Contact WhatsApp support to report what happened and request help recovering your account.
4. Inform your contacts: It is important to inform your contacts that your account has been cloned, so that they can avoid any interaction with the attacker.

Veja também:

• How to put a photo with music on your WhatsApp status?
• Screen recording apps: 4 good options

Frequently Asked Questions

1. Can I recover my WhatsApp account after cloning? Yes, you can recover your WhatsApp account, but it's important to act quickly and follow the recovery steps provided by WhatsApp support.
2. How can I protect my WhatsApp account from cloning? To protect your WhatsApp account against cloning, it is important to activate two-step authentication, choose secure passwords and not share them with anyone.

Final considerations

WhatsApp cloning is a serious problem that can affect users' privacy and security. It's important to be aware of the signs of cloning and take preventative measures to protect your account.

Enabling two-step authentication is one of the most important steps you can take to protect your WhatsApp account. Also, if your account is cloned, don't hesitate to contact WhatsApp support and follow the recovery steps.

Remember to inform your contacts and take measures to prevent this from happening again, such as regularly changing your password and always being aware of signs of cloning.

In short, if you are wondering “Was my WhatsApp cloned? How do you know and what to do?”, it is important to be aware of the signs of cloning and take preventive measures to protect your account.

If your account is compromised, simply follow the recovery steps and inform your contacts to avoid any interaction with the attacker.

Furthermore, with these measures, you can keep your account safe and enjoy safe use of the world's most popular messaging app.

Criteria that make a difference in the choice

• As agreed, it will be done. With teenagers, an open agreement usually works better than a deadlock — and survives discovery better.
• If it's an official tool. Google Family Link and Screen Time are free, provided by the operating system manufacturers, and do not require disabling any protections.
• The age of the person who will be accompanied. Supervising a minor child is legal. Monitoring an adult requires free, informed, and revocable consent.
• What will be monitored. Usage time and location resolve most concerns. Conversation reading is not offered by the official tool.

What these tools don't do

It's important to know what's beyond the reach of this category—that's what avoids frustration and, most importantly, prevents falling for those who promise the impossible.

• They don't work with just a phone number. Without installation on the device or account credentials, there is no access.
• They are not admissible as evidence when obtained through unauthorized access—illegally obtained evidence is removed from the case file.
• They don't read WhatsApp, Instagram, or Telegram conversations: the messages are end-to-end encrypted.
• They don't stay invisible forever: Android requires persistent notification for accessibility services, and Play Protect flags the category.

Common questions

Is it legal to monitor someone else's cell phone?

Only in three situations: underage child, adult who has given free and informed consent, and corporate apparatus with a written policy.

Can my boss monitor my cell phone?

Only corporate devices, with a written policy and limited to professional use.

Can I monitor my child after they turn 18?

Not without his consent — parental supervision ends when he reaches the age of majority.

How do I know if my cell phone is being monitored?

Check Settings › Accessibility, Device administrators, Data usage per app, and WhatsApp's connected devices.

Which free app is recommended?

Google Family Link on Android and Screen Time on iPhone, both official and free.

What to do, in order.

1. Adjust the notifications on the first day. Leaving everything plugged in is the most common reason for uninstallation in the first week.
2. Review your consumption after one week. In the settings, view battery and data usage by app and restrict any that are high.
3. Try the free version before you pay. Check if the feature you want is outside the free plan—it usually is.
4. Check if it works offline. If the task is local but still requires a connection, your data is being sent to a server.

Where most people slip

• Granting access to contacts, messages, or accessibility without a clear reason.
• Installing multiple applications that do the same thing, all running in the background.
• Believing in a feature that the device's hardware does not support.
• Choosing based on average rating without reading recent negative reviews.

What the cell phone itself already does.

It's worth opening the search in your phone's settings before installing: Android and iPhone already have several built-in functions, and the native app usually consumes less battery and doesn't ask for any permissions beyond what's necessary.

Cloning, hacking, and SIM card swapping: three different problems.

The expression "WhatsApp cloned" has become an umbrella term for situations with distinct causes and solutions. Separating them helps to act correctly.

• Account hijacking using verification code. The most common by far. Someone installs WhatsApp with your number and needs the six-digit code that arrives via SMS. The scammer calls pretending to be a customer service representative, from a lottery, bank support, or job offer and asks you to forward the code. Upon delivery, your account migrates to their device and is removed from yours.
• Session opened on another device. Someone with physical access to your phone can pair WhatsApp Web or a linked device for a few seconds. Your account continues to function normally, which is why almost no one notices. Messages are mirrored in real time.
• Fraudulent SIM card swap. The criminal convinces the mobile phone operator to transfer your number to a new SIM card, using data obtained from data breaches. You suddenly lose signal, and the criminal starts receiving your SMS messages, including bank verification codes.
• Fake profile using your photo. This is not cloning: it's another number using your photo and name to scam your contacts. Your account remains intact.

The symptoms help to distinguish: losing access all at once indicates account hijacking; losing network signal indicates SIM card replacement; everything normal but contacts reporting strange requests indicates a mirrored session or fake profile.

Recover your account: the official way

There is only one method, and it works because the account belongs to the number, not the device.

1. Reinstall WhatsApp and register your number again. Upon completion of the verification, the intruder is automatically disconnected — two installations cannot use the same number at the same time.
2. If the attacker enabled two-step verification, The app will ask for a PIN that you don't have. In this case, you need to wait the seven-day waiting period stipulated by WhatsApp itself, after which registration is unlocked without the PIN. It's inconvenient, but it's the mechanism that prevents anyone from taking over anyone else's account.
3. Write to official support. You can access the service via the address provided within the app, entering the number in international format. There is no support available by phone, social media, or through links received via message.
4. Notify your contacts through another channel. — phone call, SMS, social media — stating that any request for money in their name is a scam. This is the step that prevents others from suffering losses.
5. If you lost signal, Call your phone company from another phone and block the line before anything else. Without the number, the criminal won't receive any codes.

After recovering, go to Connected Devices and disconnect everything that is listed. This is the step that most people forget and that allows the problem to return the next day.

Two-step verification and backup password

These are two different features, and they should be linked.

Two-step verification. A six-digit PIN is required whenever the number is registered on a new device. With it activated, the SMS code alone is not enough—even if you fall for the scam and give away the six digits, the attacker will get stuck at the next step. This protection resolves the vast majority of cases and takes less than a minute to activate. Register a recovery email address as well, because that's what allows you to reset the PIN if you forget it.

Cloud backup password. Your chat history saved on Google Drive or iCloud can be protected by end-to-end encryption with your own password. Without it, anyone who gains access to your linked email account can access the backup. Write down this password in a safe place: if you lose it, no one can recover the backup, not even WhatsApp.

Three other worthwhile adjustments: enable biometric app lock, restrict who sees your profile picture and status, and disable automatic addition to groups by strangers. A public profile picture is the raw material for fake profiles.

Why does the fake relative scam work so well?

The message arrives from an unknown number: “Hi mom, I changed my number, my cell phone broke.” Then comes an urgent request for a transfer. It seems rude, and it deceives thousands of people every month. The reason is not naiveté.

The script exploits three mechanisms simultaneously. First, urgency, which reduces fact-checking—those who believe a child is in trouble don't want to waste time confirming. Second, the authority of the channel: WhatsApp is where the family communicates, so the message arrives with borrowed credibility. Third, the factual information: with information coming from leaks and social media, the scammer knows the relatives' names, the city, and sometimes even their nicknames.

Defense is planned as a family, before it's needed:

• A keyword Known only to close relatives, to confirm identity in requests for money.
• Fixed rule of calling back For the old number, never for the new one provided in the message.
• Automatic distrust of short audio and video files. Tools already exist that can clone voices from just a few seconds of recording. Hearing a relative's voice is no longer sufficient proof.
• No transfers without confirmation through another channel. Without exception, even when in a hurry.

What the law provides and where to report it.

Account hijacking with a demand for money constitutes fraud. Law 14.155/2021 amended the Penal Code to increase the penalty when the fraud is committed electronically, using a server maintained outside the country, or against an elderly person. Invading another person's device to obtain data has its own specific type in article 154-A.

The steps that lead to practical consequences:

1. File a police report. Several states have online police stations, and some have specialized cybercrime units.
2. Preserve the evidence before deleting anything. Screenshots with the date, scammer's number, receipts, and conversation history. Exporting the conversation directly from WhatsApp generates a more complete file than individual screenshots.
3. Contact the bank immediately. If a transfer has occurred, the special Pix refund mechanism has a short timeframe and depends on prompt notification.
4. Report the number within WhatsApp., This sends recent messages for analysis and helps to take down the account used in the scam.
5. Notify the operator. If the SIM card was switched, request a formal record of the incident for possible dispute of liability.

Finally, the warning that closes the cycle: there is no app that "discovers who cloned" nor any service that recovers the account upon payment. Any offer of this type is a second layer of the same scam, designed to prey on those who are already desperate.