Your WhatsApp account can be deactivated with just one email

Just a heads up, if you buy something through our links, we may get a small share of the sale. It’s one of the ways we keep the lights on here. Click here for more.

Your WhatsApp account could be deactivated with just a single email, and the process is worryingly simple. This vulnerability was brought to light by Jake Moore, a former law enforcement head of digital forensics.

And what’s even wilder is that it doesn’t require sophistication or any special hacking art. All one would need to do is send out an email.

Here’s how it works: an attacker only needs to know your phone number. They then send an email to WhatsApp support, claiming that the phone number (which is yours) is actually theirs and that it has been compromised.

They request for the account linked to the number to be deactivated. WhatsApp’s response to this is to send a six-digit code to the number in question via SMS. The attacker, however, does not have access to this code since they don’t have your phone.

They continue to insist that the phone has been lost or stolen, leading WhatsApp to ask for an email confirmation to proceed with the deactivation. The attacker provides their own email address, and with no further verification, WhatsApp deactivates the account linked to your phone number.

You, the rightful owner, are left in the dark, unable to access your own account.

Yikes!

With a whopping two billion strong user base, WhatsApp has found itself in quite the pickle. It really hammers home just how much we need security tighter than a drum in this digital playground of ours.

WhatsApp has been made aware of this issue, and fingers crossed, they’re not just sitting around but are getting their gears into action ASAP to squash this rather noticeable blip on the radar.

Meanwhile, folks, don’t let your guard down. Pop that two-step verification feature on for your WhatsApp accounts because, hey, better safe than sorry.

 Remember, sometimes the danger doesn’t come in a big scary monster form – it’s just an innocuous-looking email sitting in your inbox. So keep your wits about you, and don’t drop that cybersecurity guard for even a second.

Have any thoughts on this? Drop us a line below in the comments, or carry the discussion to our Twitter or Facebook.

Editors’ Recommendations:

• WhatsApp beta introduces a new screen-sharing feature
• WhatsApp chats can now be locked behind password-protected folders
• WhatsApp rolls out update with users’ “most wanted features” 
• How to identify and prevent WhatsApp spam

Kevin Raposo

Kevin is KnowTechie's founder and executive editor. With over 15 years of blogging experience in the tech industry, Kevin has transformed what was once a passion project into a full-blown tech news publication. Shoot him an email at kevin@knowtechie.com.