HERALD

WhatsApp accounts under attack – why Zimbabweans are losing access

Emmanuel Kafe

Fact Check

FROM small businesses losing contact with customers to individuals discovering that someone is impersonating them, WhatsApp account security is becoming a growing concern for Zimbabweans.

While reports of hacked or blocked accounts are circulating among users, there is no verified national figure establishing how widespread the problem is.

However, warnings from Econet Wireless Zimbabwe and the Zimbabwe Republic Police point to real threats involving account takeovers, fraud and SIM swapping.

On September 23, 2026, Econet urged customers to strengthen their WhatsApp security, recommending passkeys and two-step verification amid rising mobile scams.

The Zimbabwe Republic Police also warned of alleged fraud involving SIM replacements and WhatsApp account takeovers.

In the cases described, criminals allegedly obtained victims’ personal information, impersonated them to mobile network operators and used replacement SIM cards to gain access to accounts and request money from contacts.

How accounts are compromised

One common method involves tricking users into sharing the six-digit verification code sent when someone attempts to register their number on WhatsApp.

Criminals may also exploit SIM swapping, malicious applications or access to linked devices.

Business accounts can be particularly disruptive targets because criminals may impersonate a company, contact customers and solicit payments using its identity.

However, an account being blocked does not automatically mean it has been hacked.

WhatsApp may restrict accounts for suspected violations of its terms, while loss of access can also result from registration or SIM-related problems.

How to protect your account

WhatsApp users should open Settings, select Account, then Two-step verification, and enable the feature according to information on the official WhatsApp website.

“Where available, set up a passkey and add a recovery email. Never share your six-digit registration code or PIN, even with someone claiming to be a friend or WhatsApp representative. Regularly check Settings → Linked devices and log out unfamiliar sessions.”

Download only official WhatsApp applications and protect your phone with a strong screen lock.

Business owners should also limit who can access company accounts and independently verify unusual payment requests.

If an account is hijacked, re-register the phone number using the six-digit code received by SMS or phone call, then review linked devices. Alert customers and contacts through another channel.

The key lesson is simple: convenience should never come at the expense of security.