Who can message me?

By default, people who know your phone number or username, or who share a group with you, may be able to contact you.

You can use privacy settings to limit who can see your phone number, add you to groups, call you, and so on.