Most emblematic WhatsApp scams aren’t high-tech information breaches. They aren’t orchestrated by state-sponsored hacker groups pinch a bottomless wallet and military-grade technology. In fact, astir of them are tally by low-tech crime syndicates relying connected societal engineering techniques to return advantage of people’s unsighted spots and spot successful others.
Meta removed 6.8 cardinal WhatsApp accounts associated pinch cyber crime and integer scams conscionable successful the 2nd half of 2025. But the attacks show nary motion of slowing down because they are debased connected costs and easy to rotation up, pinch chatbots executing astir of the legwork connected autopilot. However, there’s a flip broadside to each this: societal engineering only useful erstwhile you don’t cognize what to look for.
Most of these scams travel a circumstantial playbook and person a akin shape of execution. If you cognize what to watch retired for, you tin extremity them earlier they discuss your information aliases lead you into a financial trap. Below are 7 of the astir communal scams that WhatsApp cybercriminals for illustration to run, pinch tips connected really to safely debar each 1 of them. Learn really to show erstwhile you’re astir to beryllium scammed, alteration caller features that protect your relationship privacy, and cognize really to respond erstwhile an onslaught is already underway.
The verification codification hijack
I’d complaint this arsenic the astir vulnerable WhatsApp scam successful this list, because it locks you retired of your full relationship and puts it successful the hands of the attacker. It’s besides 1 of the simplest to execute. Here's really it works: A scammer enters your telephone number connected WhatsApp to log into your relationship utilizing their device. This triggers WhatsApp to nonstop a verification codification to your registered telephone number. Right connected cue, personification pretending to beryllium a friend aliases family personnel texts you pinch a petition to stock the verification codification you conscionable received nether immoderate mendacious premise. If you manus complete that verification codification you received successful response, that’s it: WhatsApp will log you retired of your existent instrumentality and transportation entree of your relationship to the attacker, who tin past do immoderate they want pinch it, including changing each your credentials.
Avoiding this onslaught is besides arsenic simple. Just don’t stock your WhatsApp verification codification to anyone complete a telephone aliases text, moreover if it seems for illustration personification from your interaction list. If you person a connection from WhatsApp pinch a caller verification code, return it arsenic a motion that someone’s attempting to hijack your relationship and don’t conscionable presume it’s a glitch.
Also make it a constituent to alteration 2-step verification connected your WhatsApp relationship arsenic a modular practice, by navigating to Settings > Account > Two-step verification successful the Android aliases iOS app. That way, an attacker pinch a stolen verification codification won’t beryllium capable to get into your relationship correct away, because they will besides request to verify the petition utilizing your preferred authentication method.
Faking an emergency
Once an attacker has entree to someone’s WhatsApp account, often by doing conscionable arsenic I discussed successful the past example, they will occurrence disconnected a drawstring of messages utilizing that compromised relationship to everyone successful the victim’s interaction list. They will dress to beryllium the unfortunate successful immoderate benignant of aesculapian aliases financial emergency, past inquire group to nonstop them money arsenic quickly arsenic possible.
Citing an emergency creates panic wrong people, which makes them little apt to verify the authenticity of the request. By the clip the original unfortunate gets astir to sharing that their relationship has been hijacked, aggregate group person already been scammed utilizing that stolen account. Scammers will sometimes moreover usage AI-generated sound messages to make the petition look legitimate, provided they already cognize what the existent relationship holder sounds like.
I ever show my friends and acquaintances ne'er to transportation costs aliases grant a delicate petition sent complete matter without double-checking if it’s real. When you get a petition for illustration this connected WhatsApp, simply telephone that personification straight complete the phone, utilizing a known interaction number that’s not been precocious changed. If the requester claims that the number has changed aliases the telephone is retired of battery, that’s a reddish flag. If you’re worried that the petition mightiness beryllium authentic, telephone personification other who lives adjacent that personification aliases spell complete physically to verify.
Long-term integer romance scams
WhatsApp is simply a celebrated prime for online making love scams acknowledgment to its fame arsenic a messaging service, but these scams seldom springiness themselves distant astatine first. Instead, attacker walk months building rapport pinch a imaginable unfortunate complete agelong chains of matter and audio messages. When they’re assured astir the level of spot they person established, the asks begin. First, they inquire for mini transfers that don’t spell complete $100, citing thing urgent but non-critical.
Slowly, the requests turn successful financial worth until the unfortunate realizes something’s up and calls it off. Family emergencies, individual rate travel issues, and moreover finance offers successful cryptocurrency aliases backstage costs are often utilized to unit victims into giving distant money. If personification you’ve ne'er met successful beingness abstraction asks you for cash, that’s an contiguous giveaway that thing is wrong. Normal group seldom inquire personification for money unless they cognize them good successful person, truthful usage be aware whenever you spot a petition for illustration that.
Premium app subscription invites
This is simply a very communal play that’s particularly celebrated erstwhile targeting demographics pinch debased integer literacy. You person a backstage connection from what looks for illustration an charismatic WhatsApp relationship claiming that you’ve been invited to effort retired a caller subscription tier that isn’t disposable to the wide public. Often, the connection is accompanied by a nexus to download and instal an app from an chartless source. As soon arsenic you click connected the link, it installs malware connected your instrumentality that could scope from ransomware to keyloggers, which tin past beryllium utilized to execute blackmails aliases cyberattacks.
If you person a connection inviting you to WhatsApp Gold, WhatsApp Premium, aliases immoderate different balanced subscription tier that cannot beryllium verified done charismatic sources, do not click connected the link. Also mostly debar installing apps that don’t travel from charismatic sources for illustration Google Play aliases App Store, unless you explicitly spot the developer sending you the link. Apps installed from third-party links are not taxable to the accustomed information audit that charismatic marketplaces require them to clear, which increases the consequence of being infected by malware. Most smartphones disable third-party app installation by default for this nonstop reason.
If you want to beryllium moreover safer, navigate to Settings > Privacy > Advanced wrong WhatsApp and toggle connected Disable nexus previews. While nexus previews successful WhatsApp are mostly safe, they tin expose your device’s metadata and wide geolocation to the website administrator for a mini period, which tin beryllium utilized to escalate much blase cyber attacks.
Impersonating celebrated work providers
A communal shape among WhatsApp scams is the usage of charismatic names and logos to impersonate work providers and trusted authorities, for illustration banks, transportation services, tech support, and sometimes moreover section rule enforcement. Since group are much apt to spot messages that travel from these providers without further verification, it gives attackers the model they request to make different unreasonable requests.
If personification claims to beryllium a slope worker who needs you to stock a one-time password for a information check, connection to telephone them backmost utilizing a known charismatic number alternatively of continuing the speech successful the aforesaid (potentially compromised) channel. Same goes for anyone who identifies arsenic a section rule enforcement aliases taxation section official. They could frighten you pinch non-compliance if you refuse, but retrieve that you tin ever telephone the agency and verify it pinch them officially, alternatively of acting connected a random call. Sometimes, scammers moreover dress to beryllium tech support and inquire for distant entree to your instrumentality truthful they tin troubleshoot an issue. IT unit knows not to do this extracurricular of established channels.
The problem pinch these requests is that they tin alteration wildly successful really the attacker presents themselves and what their first inquire is. But the communal thread is that organizations aliases their labor won’t typically telephone you from their individual number aliases moreover an chartless business number to inquire for details. Just politely connection to telephone backmost utilizing an charismatic number that you tin verify, past disconnect the call. That almost ever stops these attempts correct away, because they usage a spray-and-pray attack to target ample numbers of group and look for an easy mark. I’ve personally received aggregate calls from group claiming to beryllium section rule enforcement reaching retired astir a passport reside verification, but a speedy telephone to the section landline showed that this wasn’t the case.
Gamified occupation and question and reply scams
According to the FTC, group successful the United States mislaid complete $500 cardinal successful 2024 to occupation scams alone. With unemployment rates being arsenic precocious arsenic they are, astir group don’t want to antagonize anyone coming to them pinch a occupation offer. Scammers cognize this and they count connected it. It whitethorn commencement by getting a WhatsApp matter from an chartless number pinch an easy distant activity offer. Sometimes, they will moreover salary you mini amounts to found spot successful return for elemental jobs for illustration boosting a merchandise listing.
Eventually, they’ll inquire you to deposit a important magnitude of costs pinch them earlier you person the adjacent batch of tasks, for “verification purposes.” That’s erstwhile you tin instantly show that thing is wrong. Most group cognize that employers will ne'er inquire you for costs conscionable to springiness you work, but scammers tin travel up pinch clever reasoning to warrant these overseas requests. Sometimes, the inquire isn’t for a money deposit astatine all. Instead occupation scammers will request entree to your instrumentality aliases moreover inquire you to complete a short study utilizing a (malicious) link.
Your champion stake for spotting occupation scams connected WhatsApp is to ne'er spot an chartless number pinch an connection of employment aliases moreover an interview. No matter really mini the request, it whitethorn connection a measurement for them to discuss your instrumentality aliases summation entree to your accounts. Simply inquire them to pass utilizing an charismatic institution email reside aliases landline. If they refuse, that’s a beardown denotation you're being targeted.
Fake charity, disaster relief, and NGOs
WhatsApp scams prey connected people’s affectional vulnerabilities, which is why pretending to beryllium a kindness aliases disaster alleviation money is simply a communal measurement to instrumentality group into sending money. Worse still, these messages often get forwarded from 1 unfortunate to different without verification, creating a consciousness of implicit spot that is not earned but assumed. You tin usage platforms for illustration Charity Navigator and CharityWatch to find if a kindness is existent and get their charismatic interaction specifications for verification. Most morganatic charities do not solicit donations done WhatsApp, and moreover if 1 does, it’s amended (and safer) to salary done an charismatic method listed connected their statement website anyway.
A fewer much WhatsApp information tips
WhatsApp scammers often usage existent people’s likenesses to perpetuate scams. If you’re worried astir your floor plan image aliases personality being utilized to perpetrate fraud, you tin restrict your floor plan photo, astir section, and activity position to Contacts only by navigating to Settings > Privacy.
Periodically cheque for immoderate unauthorized devices connected to your relationship by going to Settings > Linked devices. If you’re not judge if a log successful came from a instrumentality you own, you should log retired of each progressive sessions conscionable to beryllium safe.
Under Settings > Privacy, you tin take to toggle connected silence chartless callers to debar being approached by scammers and attackers utilizing numbers not successful your interaction list.
WhatsApp now offers optional usernames for those who don’t want their telephone number to beryllium publically visible connected their account. You tin entree this characteristic by going to Settings > Account > Username connected your mobile app.
When you fishy that thing is simply a scam, usage the Report and block action to notify WhatsApp of the effort truthful it tin put the attacker’s relationship nether review.
English (US) · 
Indonesian (ID) · 
