WhatsApp Spied On: How to Tell If Someone Is Reading Your Messages and How to Protect Your Account
Updated: 3 days ago
Quick answer
The most common way for someone to read your WhatsApp isn't a "hacker": it's a WhatsApp Web session or another linked device opened behind your back, or the 6-digit code you were tricked into sharing. Check right now in Settings › Linked devices, log out of any sessions you don't recognise, turn on two-step verification and never share the registration code with anyone. If someone still knows what you write, there may be spyware on the phone or access to your backups, and then a technical analysis is justified.
The four real ways someone can read your WhatsApp
1. Linked devices (WhatsApp Web, Desktop or another phone)
WhatsApp lets you use the same account on several devices at once. All it takes is for someone to have your unlocked phone for a few seconds to scan the QR code and open a session on their computer. From then on, they see all your chats in real time, without your phone showing anything unusual.
How to check: WhatsApp › Settings (or the three dots on Android) › Linked devices. You'll see the list of sessions, with the device type and last activity. If there's one you don't recognise, tap it and choose Log out.
2. Account registered on another phone ("cloned" WhatsApp)
If someone gets hold of the 6-digit code that WhatsApp sends by SMS or call, they can register your account on another phone. It's usually requested with a pretext: "I sent you a code by mistake", "it's for a prize draw", "I'm from support". In this case, your WhatsApp stops working and a message appears saying the number has been registered on another device.
What to do: register the number on your phone again with the new code you receive. That logs out the other device. Then turn on two-step verification. Warn your contacts, because these cases are often used to ask for money in your name.
3. Cloud backups
WhatsApp chats can be saved to Google Drive (Android) or iCloud (iPhone). Anyone with access to your Google account or Apple ID may, under certain conditions, restore those backups on another device.
How to protect yourself: WhatsApp › Settings › Chats › Chat backup › turn on end-to-end encrypted backup, with a password only you know. Change your Google or Apple account password and check which devices are signed in.
4. Spyware installed on the phone
Spy apps, installed by someone who had the device in their hands, can read notifications and the screen and, in doing so, your WhatsApp messages. They are more common on Android, but there are also solutions that work on iPhone through iCloud or management profiles. The signs and how to check are in How to tell if your phone is being spied on.
Signs that your WhatsApp may be spied on
There are sessions in Linked devices you didn't open.
Messages show as read (two blue ticks) before you open them.
You receive WhatsApp verification codes you didn't request. Someone is trying to register your account.
WhatsApp logged you out on its own or said the number was registered on another phone.
Someone knows the content of conversations you never shared.
Your contacts have received messages you didn't send.
How to protect your WhatsApp, step by step
Review your linked devices and log out of any sessions you don't recognise.
Turn on two-step verification: Settings › Account › Two-step verification. Choose a 6-digit PIN different from your other codes and add a recovery email.
Never share the 6-digit code, not with friends, not with anyone claiming to be from support. WhatsApp never asks for it.
Turn on app lock (Settings › Privacy › App lock) with Face ID, fingerprint or a passcode.
Protect your backups with end-to-end encryption.
Use a strong lock code on your phone and don't share it. Most access starts with the unlocked device in someone else's hands.
Review the permissions of your apps, especially accessibility and notification access on Android.
Ask your operator for a PIN for SIM card changes, to make it harder to duplicate your number.
If you find out someone was reading your messages
Photograph the screen of Linked devices before logging out, with the date and last activity visible.
Don't confront the person straight away; there may be more than one method of access.
Keep evidence outside the compromised phone.
Reading another person's messages without consent may be a criminal offence in Portugal. See Wiretaps, recordings and trackers: what is a crime in Portugal.
If the surveillance is part of a pattern of control, read Stalking and technological control, which lists the support lines.
When a technical analysis is needed
If you've done all the steps and the feeling of being watched continues, the most likely explanation is spyware or account access that isn't visible to the user. In that case, we carry out a technical analysis of the phone and linked accounts:
the phone stays with us for about 12 hours;
we check apps, permissions, management profiles, sessions and remote access;
we deliver a written report with what was found and our recommendations;
the evidence is preserved so that you can decide on the next steps with your lawyer.
Appointments are booked 24 hours in advance. For other devices and premises, see our electronic sweep and digital forensics services. To also check call forwarding, read *#21# code: what it shows and what it doesn't detect.
About us
The analysis is coordinated by Alexandre Ribeiro, a private detective with experience since 2001 and a member of WAD (no. 1687), APDPE (no. 1326), LIDEPPE (no. 33) and IKD. Detetives Privados Portugal works throughout the country, with teams in Porto and Lisbon.
The initial assessment is free and confidential, with a fixed quote. Call +351 936 225 975 (24-hour answering) or use the contact page.
Frequently asked questions
How do I know if someone has my WhatsApp open on another device?
Open WhatsApp, go to Settings › Linked devices and look at the list of sessions. Log out of any session you don't recognise.
What is a cloned WhatsApp?
It's when someone registers your account on another phone, usually after tricking you into sharing the 6-digit code. Your WhatsApp stops working until you register the number again.
Can someone spy on my WhatsApp without touching my phone?
Rarely. In most cases, the person had your unlocked phone in their hands, obtained the verification code or has access to your Google or Apple account, where the backups are stored.
Does two-step verification stop my WhatsApp being cloned?
It makes it much harder, because anyone trying to register your account also needs the PIN you chose. It should be combined with never sharing the 6-digit code.
Is logging out of WhatsApp Web enough?
It closes that access, but if someone opened the session, they had your phone in their hands and may have done more. Also review your apps, permissions and accounts, or ask for a technical analysis.
How long does the phone analysis take?
The phone stays with us for about 12 hours and we deliver a written report. The appointment is booked 24 hours in advance.
Comments