WhatsApp is central to almost everyone's life in Brazil — work, family, money. That's why it's become a target, and that's why "monitoring WhatsApp" is one of the most frequent searches in the country. This guide separates what is technically possible from what is sold as if it were, and ends with what really matters: how to prevent your account from being accessed by another person.
What is truly possible?
Link your own devices
Your account works on up to four devices in addition to your mobile phone. In Settings › Connected devices, You link your computer or tablet. It's the closest legitimate feature to "viewing conversations elsewhere"—and it only applies to your account.
Supervising a minor child's device
Official tools show how long WhatsApp is used, at what times, and whether it has been installed. They do not show the content of the conversations.
Accompanied by an adult with consent.
Possible if there is free, informed, and revocable consent. The common and healthy case is location sharing between family members, activated by both parties.
That's not possible, no matter how much they announce it.
All messages are end-to-end encrypted: they are encrypted on the sending device and decrypted only on the receiving device. Not even WhatsApp's servers can read the content in transit. This results in three impossibilities:
- Monitor using only the number. The number is an identifier, not an access key. It doesn't exist.
- Intercepting messages over the network. There is no legible copy to intercept.
- Remotely clone an account. What they call cloning is always WhatsApp Web being scanned with your device, or the six-digit code scam — in both cases, with the victim's unwitting participation.
The scams that cater to this search
- Phantom signature. Tracking animation, bar that freezes on 98%, registration with card. Billing is recurring; the panel never works.
- Deceptive QR code. The page asks you to scan a code "to link the monitoring." Whoever scans it connects their own account to a stranger's computer, who then gets to read everything.
- Six-digit code. Someone pretends to be an acquaintance or a call center agent and asks for the code that arrived via SMS. Whoever forwards it loses their account immediately.
- APK containing Trojan. Download via link, with instructions to disable Android protection. It often contains banking malware.
The legal part
Installing monitoring software on an adult's cell phone without their knowledge is considered unauthorized access to their computer system., Article 154-A of the Penal CodeImprisonment from 1 to 4 years and a fine, increased to 2 to 5 years when there is obtaining of the content of private communications, with an increase of one to two-thirds in case of disclosure. Spouses and boyfriends are not exempt.
How to protect your account in ten minutes.
- Two-step verification. Settings › Account › Two-step verification. Set a six-digit PIN and register a recovery email. This measure alone prevents most account hijackings.
- Review connected devices. Settings › Connected devices shows all active sessions with approximate date and location. Disconnect any that you don't recognize.
- Biometric lock. Privacy › App Lock. Solves the problem of phones being left on the table.
- Block sensitive conversations. Tap and hold the conversation and choose to lock it: it will go to a protected folder, without appearing in notifications.
- Encrypt the backup. Conversations › Backup › End-to-end encrypted backup. Protects your history in the cloud as well.
- Hide preview in notifications on the lock screen, so that the message is not visible to anyone nearby.
If your account has already been taken over
- Reinstall WhatsApp and log in with your number — the SMS code will terminate the attacker's session.
- Enable two-step verification immediately.
- Warn your contacts, because the next scam involves asking them for money in your name.
- File a police report.
- If there was a financial loss, notify the bank and dispute it.
To supervise children
O Google Family Link It's free and official: time limit per app — including WhatsApp —, mandatory approval for installations, content filters, and device location. On iPhone, the Usage Time It serves the same function.
They don't display conversations, and that's not a technical limitation that can be overcome: end-to-end encryption applies to everyone. Tracking usage time and changes in standards is what's available—and that's usually enough to notice when something has changed.
Google Family Link
AndroidFrequently Asked Questions
Is there an app that can monitor WhatsApp from another phone?
Not from a distance. Commercial products require manual installation on the device, and using them against an adult without consent is a crime.
How do I know if someone is reading my conversations?
Settings › Connected devices shows active sessions. On Android, also check Accessibility and Device administrators.
Does WhatsApp notify you when someone links a device?
Yes, and the session is listed. That's why it's worth reviewing the list from time to time.
Does two-step verification hinder usability?
Almost never: the PIN is requested sporadically and only when registering the number on a new device.
Can cloud backups be read?
With end-to-end backup encryption enabled, no — not even by the cloud provider.
In summary
Monitoring someone else's WhatsApp remotely is impossible: encryption prevents it, and what's sold as a solution is a scam or a crime. What truly exists is control over your own account—two-step verification, review of connected devices, biometric lock, and encrypted backup. Ten minutes of setup solves the problem that really affects you.
What to do, in order.
- Review the agreement every few months. Limits that don't match age become a source of conflict and challenges.
- Use the official tool. Google Family Link on Android and Screen Time on iPhone: free, visible on the device, and without requiring you to disable any protection.
- Enable installation approval. It prevents new apps from appearing without your knowledge, which is half the problem.
- Combine before configuring. With a teenage child, an agreement on what will be monitored is worth more than any restriction—and survives discovery better.
Where most people slip
- Disabling Play Protect to install files from outside sources is the most common vector for banking trojans.
- Relying on evidence obtained through unauthorized access in a legal proceeding—it is discarded and exposes whoever produced it.
- Don't believe promises of monitoring based solely on a phone number; it doesn't exist.
- Expecting to read WhatsApp conversations: end-to-end encryption prevents this, for any tool.
The alternative that is already included in the system
To find a lost device, Find My Device and Find My iPhone are free and come standard: they sound an alarm even when the device is on silent, show it on a map, and remotely lock and erase it. It's worth checking today if they are activated — once lost, you can't configure them anymore.
What the other side deduces without intruding on anything.
Much of the distrust that leads someone to seek to "monitor WhatsApp" doesn't stem from any intrusion. It arises from interpreting the signals that the app itself publishes, and which any contact can see.
- Online. It simply indicates that the application is open at that moment — even when the person opened it to view a work message.
- Last viewed. It records the last time the app was open, without saying who the conversation was with.
- Typing. It appears to those who have the conversation open, and disappears when the person abandons the sentence.
- Traces of delivery and reading. They say the message arrived on the device and that the conversation was opened. They don't say whether it was read carefully.
- Profile picture and message. The date of the change is visible, and the change itself is often overinterpreted.
- Status. The list of who viewed it is given to the person who published it, with names and order.
None of this is a security flaw. These are convenience features that have been around for over a decade. The problem arises when they are interpreted as proof of something.
Online status trackers: what this category does
There is a type of app that presents itself as an activity monitor and, unlike fake spyware programs, it actually works — but it doesn't do anything close to what it promises.
The mechanics are simple and straightforward. The app repeatedly checks the status of a number you've registered and notes each time it appears as online. This creates a report of times and time spent online. There's no intrusion, because the data consulted is the same that appears at the top of the conversation for any contact.
What this report shows
- Times when the number had the app open.
- Approximate duration of each session.
- Patterns throughout the days.
What he doesn't show, and never will show
- Who did the person talk to?.
- Any message, photo, or audio content.
- Whether the activity was a conversation, automatic backup, updating someone else's status, or simply an opened notification.
Some of these apps sell a "cross-referencing" function, suggesting that if two numbers are online at the same time, they are talking to each other. This is statistical inference about two points, with no real value—in any city, thousands of people are online at the same minute.
It's worth adding the legal aspect: systematically monitoring another person's routine, even with publicly available data, can constitute stalking, which has been a crime since 2021. The fact that the information is visible does not authorize continuous recording for the purpose of control.
Why are these signs so misleading?
The reports generate arguments for a simple technical reason: the application opens on its own in several situations.
- Notification received. The device simply needs to process the arrival of a message in the background.
- Scheduled backup. The wheels roll in the early hours of the morning, and the unusual time is often interpreted as a sign of secret conversation.
- Synchronization on another device. Connected computers and tablets generate activity without anyone touching their cell phones.
- Accidental touch. Cell phone in pocket, notification opened unintentionally, screen turned on by mistake.
- Time zone and shift. Those who work nights have a reversed work schedule, and no report knows this.
Therefore, the practical result of these apps is almost always the same: they fuel suspicion without providing information. The question that would resolve the doubt is asked to the person, not to the app.
Groups and communities: what is visible to strangers
There is a real exposure that almost no one notices, and it doesn't depend on any program: participating in groups.
- Your number will be visible. for all participants, including strangers.
- Your profile picture and message They can be viewed by group members, even if the setting is restricted to contacts, depending on the chosen setting.
- A visible number allows for searching. on other platforms and feeds mailing lists.
- Scammers collect phone numbers from open groups. They use photos and names to create fake profiles, asking for money from people they know.
Three adjustments reduce this almost completely: defining who can add you to groups, restricting profile pictures and messages, and leaving open groups you don't actually participate in. In large communities, administrators can send notifications to everyone, but participants in different groups don't see each other's numbers—it's worth checking the structure before joining.
Reduce what you emit, without disappearing.
It's possible to significantly reduce the signals while still keeping the app usable.
- Last viewed online. They can be limited to contacts, or to no one. By restricting your "last seen" status, you also stop seeing others' – a fair trade.
- Read receipts are off. It works both ways and reduces the need for an immediate response.
- Status for whomever you choose. You can exclude specific contacts or publish only to a specific list.
- Photo and message restricted. It reduces the material available for fake profiles using your face.
- Preview of "message turned off" on the lock screen. Adjust the system, not the application.
- Silencing strangers. It cuts out most of the harassment from random numbers.
One final observation that concludes the topic: reducing signals protects your privacy, but it doesn't protect anyone from suspicion. A relationship that depends on checking online times already has a problem that no app adjustment can solve.
