Someone Is Impersonating Me With a WhatsApp Username

WhatsApp usernames are new, and impersonators moved fast. Here's how to respond.

Last checked: 29 October 2026 against the sources listed at the end of this guide.

Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form. Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form. Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form.

#How do I report it?

1. Open the chat or the profile.
2. Tap the name, then Report.
3. Block the account.
4. Ask contacts who were messaged to report too.

WhatsApp's How to block and report someone page says blocking stops messages, calls and status updates from that person, and you can tick Report to WhatsApp when you block. The existing chat stays in your list, so you may want to take screenshots first. WhatsApp says you can't block a group, but you can exit it and block the admin, and change your privacy settings so unknown contacts can't add you to groups. If you or anyone else is in immediate danger, contact local emergency services.

#How do usernames protect me?

WhatsApp's Answering questions about usernames page says usernames are an optional way to connect without sharing your phone number, and that you still need a phone number to register. Creators and businesses can claim their existing Instagram or Facebook username. A username key adds a second check: someone has to know both your exact username and your key to contact you for the first time, and you can reset the key at any time. When a business contacts you, its phone number is still shown.

#What if they scam my contacts?

Report the account, warn contacts, and report losses to police. Your phone number isn't shown to people who only know your username.

WhatsApp's About suspicious messages and scams page lists signs to look out for: typos, being asked to tap a link or download an app, requests for card or bank details, birth dates or passwords, being asked to forward a message or pay to use WhatsApp, someone pretending to be a person you know, and messages about lotteries, jobs, investments or loans. When someone not in your contacts messages you for the first time, WhatsApp shows whether you have groups in common and which country their number is registered in. WhatsApp says it's free, so anyone asking for payment to use it or to unban an account is likely after your money or details.

WhatsApp's How to protect yourself from suspicious messages and scams page gives four steps: pause and think about whether they're rushing you, threatening you or asking for money, a password or a PIN; stop the conversation and don't share anything if you can't verify who they are; block and report them; and update your privacy settings and turn on two-step verification.

#What common mistakes should I avoid?

• Ignoring the fake until contacts are scammed.
• Only blocking without reporting.
• Not reserving your own username.
• Sharing your username key publicly.

WhatsApp warns that if you report the compromised account you're trying to recover, it might be banned and you could lose access to your account or data, so recover it first. It also recommends telling family and friends, because the person using your account could impersonate you in chats and groups, and says WhatsApp notifies you when someone tries to register an account with your phone number. Never share your registration code with anyone, not even friends or family.

WhatsApp's About two-step verification page describes it as an optional feature that adds security by using two forms of authentication. When you turn it on, you can use your phone number, a password or an email address as the extra check, and a passkey lets you log in faster with your phone's fingerprint, face or screen lock.

#How do I keep the account safe while I sort this out?

• Never share a login code, password or backup code with anyone, including people who say they work for Meta, the police or a recovery service.
• Make sure the email address and phone number on the account are ones you still control, and remove any you do not recognise.
• Turn on two-factor authentication where the platform offers it, ideally with an authenticator app, and keep your backup codes somewhere offline.
• Log in only from the official app or by typing the address yourself, not from links in messages, comments or ads.
• Keep screenshots of every notice, email and step you take, with dates, in case you need them for a review or a report.
• Make one careful attempt at each official step rather than many rushed ones, because repeated failed attempts can trigger extra checks.

#When It Is Safer to Get Expert Help

Ask for help before you appeal if the account matters to your income, your business or your memories, if you have already had one appeal rejected, or if you cannot tell whether the problem is a bug, a restriction or a hack. That is where most avoidable losses happen.

AwareXone is independent and not affiliated with Meta, Instagram, Facebook, WhatsApp or Threads. Recovery work is best-effort and the platform makes the final decision.