Common WhatsApp scams and how to avoid them

With over two billion users, WhatsApp provides a large pool of potential targets for scammers. To make matters more complicated, fraudsters are not known for resting on their laurels – instead, they learn new and sophisticated social engineering skills to trap us in their deception.

The app is used by so many people of different ages and backgrounds and in such diverse contexts that it becomes increasingly important to be alert to dangers. And because anyone who knows your phone number can send you a message on WhatsApp, it’s also easy for scammers to reach their targets.

Indeed, in December 2022, it was revealed that a database of over 500 million WhatsApp accounts had been put up for sale on the dark web. For a few thousand dollars, scammers can gain access to information on endless numbers of real, active WhatsApp users. What’s worse, taking control of just one account might have an unexpected snowball effect.

So, are you at risk?

To put it bluntly, all WhatsApp users are at risk of being scammed. The scammers don’t often look for specific users – it’s mostly a case of trial and error. Typically, they will use their strategies against a number of people, hoping to attract some of them. And too often they succeed: authorities around the world have received reports of fraud in the order of millions of dollars.

Now let’s take a look at some fraudulent schemes that plague WhatsApp users.

1. Smishing and verification codes

Your phone “beeps”: you’ve just received a text message with an unsolicited verification code claiming to be from Microsoft, Google or even WhatsApp. You ignore it, but then a second “beep beep” draws your attention to an incoming WhatsApp message from one of your contacts. The story is strange, but it seems urgent – they really need that code you received earlier. It appears to have been sent to you by mistake.

RELATED READING: Hi There! Do you use WhatsApp? Your account might be hackable

A similar scenario can unfold when someone you don’t know claims they “got some digits of their number wrong.” The scammer’s goal is to gain access to an online account of yours that requires an SMS code for verification. If you accidentally give it, they will steal your information or even impersonate you.

2. “Hi mom!” impersonation scams

If you are a parent, you may not question a message from your child asking you for a money transfer to pay some urgent bill – even if the message comes from an unknown number. “Hi mom, this is my new number,” it begins.

The scammer will go the extra mile with this scam, thankfully taking time to build trust and using generic answers that fit almost anyone. Before you know it, you’ve transferred an amount of money you’ll never see again.

Other people around you, including other family members, may be victims of the same scammer. So let them know it happens and don’t be ashamed of it.

3. Surveys, packages and sweepstakes – they are all fake

Instead of a money transfer, you may also be tricked into handing over your personal information. While this may seem less worrisome than losing money right away, it can actually be much worse in the long run.

Some legitimate services do offer customer support through WhatsApp. So it may not seem strange if you are contacted, for example, by your bank notifying you of a “scam affecting customers” and requesting immediate action: fill out a form to prove that your personal data is correct. Oh, and it can include your bank statements!

Another easy way to steal your information is by sending fake DHL or UPS messages that request you to take a survey to confirm your delivery details (and perhaps pay a missing fee). Even if you didn’t expect something to arrive, you might want to do it just in case someone sends you something unexpected.

For special occasions like Christmas and Black Friday, when companies tend to make special offers, scammers create fake campaigns that mimic real ones. Some attention to detail, such as bad grammar or strange links, can be enough to spot the difference. But the eagerness to win big or grab an incredible bargain can override the red flags.

What’s more, these types of scams tend to be quite aggressive. They are disguised as publicity and engage your curiosity. You click and share your personal details and contacts – and then it’s game over. Some of these links can also spread various types of malware.

Many of us don’t believe we’d ever be fooled into giving out this information through a messaging app. But it happens to thousands of people every year as fraud becomes more sophisticated and deceptive – even faking empathy by creating some kind of bond between the victim and the scammer.

Examples of scams that commonly circulate on messaging apps and social media

4. Charity Scams – “$10 is enough to help”

Supporting a charity or cause, when we have the means, is a noble thing to do. But in times of crisis, scammers are most likely to take advantage of good intentions. Scammers have no shame and will use all kinds of images and messages to get you to donate to “a good cause”. These scams often involve fake websites and spread through WhatsApp and other messaging and social media apps and can even gain extra momentum when shared by people who want to spread the word and help.

The scammers often use emotional tactics, such as claiming to help victims of natural disasters or disease, to trick people into giving money. In some cases, they may even use the name of a legitimate charity to gain people’s trust. However, the donations never reach the intended recipients.

To avoid falling for a charity scam, it’s important to do thorough research on the organization before making any donations and to be wary of unsolicited requests, especially if they come from unknown numbers. It is always best to contact the charity directly and verify the legitimacy of the request.

4. Catfishing – “I love you!”

You matched on a dating app, and after a few messages you exchanged numbers and took the conversation to WhatsApp. Days passed, and you know you won’t meet soon. You are in different cities, maybe even different countries. Perhaps the other person works or even serves in the military somewhere far away from home. Somehow all questions and doubts begin to disappear as the conversation becomes more personal and intimate.

The problem is, there’s a very good chance it’s all a romance scam. In scenarios like this, the scammer will take advantage of your hope, leading you to trust them until they ask for a favor, accompanied by a carefully cooked sob story about them needing money to help their family member or out to get out of trouble.

Needless to say, you are parted from your money – most likely forever. What’s worse, many victims of romance scams are unwittingly recruited to become money mules to launder money obtained in illegal activities.

Social media and messaging platforms remain rewarding hunting grounds for dating scams. Of all types of scams, romance scams can be particularly sinister and harmful: they manipulate the victim’s feelings of trust, love, emotional connection, along with a deep desire for a romantic relationship and to help “no matter what.”

A slightly different – ​​but equally suspicious – twist on the typical romance scam

How can we protect ourselves?

There is a golden rule: accept that there is always a chance that a stranger messaging you on WhatsApp is a scammer. If possible, just avoid replying to strangers who send you out of the blue.

There are also a few more rules you can keep in mind:

Set up two-factor authentication (2FA) not only on your WhatsApp account, but all other online accounts where this option is available. Avoid sharing your personal information with people you don’t know. Do not transfer money without confirming the authenticity of the request. For example, if your child sends you a text asking for money, call them to make sure the request came from them. Never share verification codes with anyone. If someone accidentally sent you their code, they can request a new code themselves. Do not click on random links or open random attachments. If it looks like a friend sent you something, ask them via other channels if the message was really meant for you. Be sure to also look out for grammatical errors or strange links (for example, the link goes to a URL that doesn’t match the company name). Banks don’t send you on WhatsApp to ask questions. Never give away any of your personal information and login credentials via messaging apps. Visit the bank’s official website, preferably by typing its URL address in the web browser. Keep your phone’s operating system and apps updated. When you do this, make sure you use the official Google Play Store or Apple’s App Store to update not only WhatsApp, but all the apps you use. Don’t fall for random “updates” you might see online that promise colorful themes for WhatsApp. Use a reliable mobile security solution.

RELATED READING: 10 Signs Scammers Are Targeting You