For a hacked WhatsApp account in Punggol, act within minutes: log back in with your own number using the 6-digit code WhatsApp sends you, never pass that code to anyone, and warn your contacts by a normal phone call. For a hacked email or social media account, use the platform’s official recovery page and change the password straight away.
It is horrible to watch your own name being used to ask friends for money. The good news is that most accounts can be taken back, and a few quick steps limit the damage.
This page is part of eduKate Punggol’s When You Need Help in Punggol, our practical guides for life’s occasions, big and small. It covers taking back a hijacked WhatsApp, email or social media account, who to tell, where to report it in Punggol, and how to lock the account down afterwards.
Quick answer
- WhatsApp: the police advise tapping “Log back in > Continue” and entering the 6-digit code you receive by SMS or phone call. If that fails, use WhatsApp’s own recovery page.
- Email or social media: go to the platform’s official recovery page, change the password and turn on two-factor authentication.
- Warn your contacts by phone or another channel, and ask them to ignore any loan or code requests “from you”.
- If money has gone or a contact has paid out: call the bank at once, then make a police report. The ScamShield Helpline, 1799, runs 24 hours.
- Cost: every official recovery and reporting route on this page is free.
What to Do First With a Hacked WhatsApp Account
WhatsApp’s own help pages could not be read for this guide, so these WhatsApp steps follow the Singapore Police Force’s advisories of 12 November 2025, 12 March 2026 and 8 May 2026. The email and social media steps come from the Cyber Security Agency of Singapore (CSA). Work through them in order.
- Log back in on your own phone. Open WhatsApp, tap “Log back in > Continue”, enter your full international phone number if asked, then enter the 6-digit code you receive by SMS or phone call.
- Never hand that code to anyone. The police are blunt about it: “Never relinquish WhatsApp OTPs to anyone as you will lose access to your WhatsApp accounts as a result.” That includes a friend who says a code was sent to you by mistake.
- Still locked out? Contact WhatsApp. SPF tells users who suspect their account is compromised to contact WhatsApp, and points to its page How to recover a compromised account.
- Warn your contacts. CSA advises telling your contacts or followers as soon as possible and asking them to report any malicious posts. Call your closest family first, so they hear it from you.
- Remove strange devices and add a PIN. In WhatsApp, go to Settings > Linked Devices and log out any device you do not recognise. Then go to Settings > Account > Two-step verification > Enable.
- For email or social media, use the official recovery page. Change the password immediately and turn on multi-factor authentication. CSA adds: if you used the same password anywhere else, reset those accounts too.
- Clean up. Look for posts, messages or other activity that was not you, and remove it.
- Keep records and report. Save screenshots, support tickets and emails. If the account was used to commit a crime, or money was lost, make a police report and report it to the platform.
Where to Get Help With a Hacked Account in Punggol
Most of the work happens on your phone, but you can report in person in Punggol if you prefer a human being beside you.
| Who | Contact | Hours | Good for |
|---|---|---|---|
| WhatsApp recovery | In the app (“Log back in”), or WhatsApp’s recovery page | Online | Taking back a hijacked WhatsApp account. |
| Platform recovery pages (from CSA’s SingCERT list) | Facebook · Instagram · Gmail · Microsoft (Outlook) · X (Twitter) | Online | Hacked email or social media accounts. |
| ScamShield Helpline | 1799 | 24 hours | Not sure whether it is a scam. It can connect you to your bank. |
| Singpass helpdesk | +65 6335 3533 | General enquiries Mon–Fri 9am–6pm. Anti-scam line (press 9) 24 hours. | Securing Singpass when your email or phone has been hacked. |
| CSA Cyber Aid | Online tool on the CSA website | Online | Reporting a cyber incident to SingCERT and getting advice on fixing it. |
| SPF online police report | Police e-Services | Online | Money lost, or your account used to commit a crime. |
| Police self-help kiosk, ServiceSG Centre One Punggol | 1 Punggol Drive, #01-01, Singapore 828629. Near Punggol MRT (NE17) and Sam Kee LRT (PW1). | Centre hours Mon–Sat 9am–6pm, closed Sun and public holidays (check live) | Lodging a report with help nearby. |
| Punggol Neighbourhood Police Centre | 151 Punggol Central, Singapore 828727. Tel 1800-604 9999. | 24 hours | Reporting in person. |
Checked October 2026 — confirm on the official page before you go: CSA’s online platform support contacts (last updated 20 January 2025, so links can change), CSA Cyber Aid and Singpass security.
Which Situation Fits You
A friend asked you to pass on a code
In March 2026 the police warned of messages from compromised contacts saying a code was “mistakenly sent” to you. The friend’s account is already in someone else’s hands. If you have sent the code, start at step 1 above right now, then call your friend on a normal line to let them know.
An SMS said your WhatsApp needs “verification”
SPF flagged this variant in November 2025: a fake SMS claims your account has problems because of a “prolonged lack of verification” and leads to a fake WhatsApp page. If you typed anything into that page, check Linked Devices, log out anything unfamiliar and turn on two-step verification.
Your contacts are being asked for loans
This is the pattern in SPF’s 8 May 2026 advisory. After the takeover, the hijacker sends “emergency loan” requests, with payment by PayNow QR codes to digital payment providers such as Razer Merchant Services and Grab. By 8 May 2026, SPF counted at least 52 reported cases since 1 April 2026, with losses of at least $46,000. Tell everyone to check with you by a voice call before paying anything.
Your hacked email is linked to Singpass
Singpass says to reset your Singpass password immediately and call +65 6335 3533 to secure your account. If you have also lost the phone itself, our guide to restoring Singpass after losing your phone covers the rest.
An older parent’s account was taken over
Sit with them and do the steps together. Their contacts are the people the hijacker will message for loans, so ring their siblings and close friends first. Afterwards, set up two-step verification and the ScamShield app on their phone.
It is Telegram, TikTok or an Apple ID
CSA’s list of platform recovery pages does not include these. Use the app’s own help centre, then follow the same principles: change the password, turn on two-factor authentication, warn your contacts and report it if money or a crime is involved.
Costs and Rules
- Free: none of the official recovery or reporting routes above lists a fee.
- Cyber Aid is for the affected person or organisation, and covers incidents based in Singapore. CSA says that if you may be a victim of cybercrime, you should also file a police report through Police e-Services.
- When to make a police report: CSA says to report to the police and the platform if your account was used to commit a crime. SPF says to call your bank and make a police report if money has gone out.
- Officials never ask for money by phone. CSA and SPF both say government officials will never ask you to transfer money or disclose bank log-in details over a phone call.
If money has already left your account, our first-hour guide for scam losses takes you through the bank and police steps in order.
Neighbour’s Tips
- Check Linked Devices once a month. SPF lists unknown linked devices as a warning sign. It takes ten seconds.
- Turn on two-step verification today, before anything happens. Write the PIN somewhere safe at home, not in your phone’s notes.
- Make a family rule: any request for money or a code by message gets confirmed by a voice call. SPF’s own advice is to confirm “through a non-WhatsApp call”.
- Use long, different passwords. CSA suggests at least 12 characters with upper and lower case letters, numbers and symbols, and no reuse across accounts.
- Screenshot as you go. CSA asks you to keep a record of events, support tickets, emails and call records. It helps the platform and the police.
- Add the ScamShield app. SPF recommends it alongside WhatsApp’s security features. Our ScamShield setup guide walks you through iPhone and Android.
- Bookmark the recovery pages now. Finding the right Gmail or Facebook link is much harder once you are locked out and panicking.
If It’s Urgent or Gets Worse
If money is moving out of your bank account right now, call your bank immediately to block the transactions, then make a police report. ScamShield on 1799 is open 24 hours and can connect you to your bank.
If someone is threatening you, trying to extort money, or a crime is in progress, call the police on 999, or SMS 70999 if it is not safe to talk. Being targeted like this is not your fault, and the police take it seriously.
Frequently Asked Questions
How do I get my hacked WhatsApp back?
SPF’s advice is to tap “Log back in > Continue”, enter your number if asked, and type in the 6-digit code you receive by SMS or call. If you still cannot get in, contact WhatsApp through its recovery page.
How can I tell if my WhatsApp has been hijacked?
SPF lists three signs: you are suddenly logged out, you see linked devices you do not recognise, or contacts tell you about loan requests you never sent.
Should I make a police report for a hacked account?
Yes, if money was lost or the account was used to commit a crime. For non-urgent cases you can file online through Police e-Services, at the kiosk at One Punggol or at Punggol Neighbourhood Police Centre. You can also report the incident to SingCERT through CSA’s Cyber Aid tool.
A friend’s WhatsApp asked me for money. What should I do?
Do not pay. Call your friend on a normal voice line to check. If you have already paid, call your bank straight away and make a police report.
Is there a hotline just for hacked accounts?
Not that we found. The ScamShield Helpline, 1799, helps when you are unsure whether something is a scam. CSA’s Cyber Aid is an online reporting tool, and each platform runs its own recovery page.
Does recovering an account cost anything?
No official page we checked charges a fee. Be wary of anyone who offers to “recover” your account for payment.
More Help on eduKate Punggol
- ScamShield, phishing and bank scams in Punggol: kill switches, scam reports and how phishing works.
- Lost money to a scam: what to do in the first hour.
- Lost SIM or phone: suspending your line and getting a replacement.
- Lost phone and Singpass: restoring access.
- ScamShield 1799: checking suspicious calls and messages.
- Singpass, LifeSG, Myinfo and ServiceSG explained.
- Official: SPF advisory, 8 May 2026 · CSA advisory on compromised accounts · CSA platform support contacts
Once You’re Back In
When the account is yours again, spend ten more minutes on it: a new password, two-step verification, a check of linked devices and a short message to your contacts saying all is well. Then show one family member how to do the same. The next time a “code sent by mistake” message lands, they will know exactly what it is.
And if your family is also looking for calm, small-group English, Mathematics or Science, eduKate Punggol teaches classes of three in Punggol. Come find out more: Book a consultation · Chat on WhatsApp
eduKate Punggol
Small-group English, Mathematics and Science
Primary and Secondary
By appointment · +65 8823 1234
← Previous: Making friends · All help guides · Next: Online order never arrived →
Checked October 2026. Addresses, opening hours, fees and rules change, so please confirm with the official source before you go.
