Zalo users warned of remote monitoring signs and security steps

Zalo accounts can be accessed remotely when a malicious party logs in on another device. Warning signs include unexpected login notifications, the account appearing active on an unknown phone or computer, and messages that show as read, deleted or altered without the owner’s action.

Users should open the personal‑account security menu, view the list of devices that have accessed the account, and immediately log out any unfamiliar devices. Enabling two‑factor authentication adds an OTP code sent to the registered phone, preventing access even if the password is compromised. For highly sensitive conversations, the hidden‑chat feature can be protected with a PIN. Additional precautions include avoiding saving login credentials on public devices and keeping OTP codes confidential.