The most common WhatsApp scams
Most common WhatsApp scam perpetrators have similar motivation and goals. They want to steal personal details, commit identity theft, install malicious software on your device, or hustle money out of you by pretending to be someone they aren’t. Here are some of the most common scams on WhatsApp.
Impersonation or “mom and dad” scams
The impersonation scam is one of the easiest deceits to perform. In “mom and dad” scams, malicious actors use social engineering to play on your feelings for your family.
How does the scam work? The scammers pretend to be a family member, typically the victim’s child. The “son/daughter” claims their phone is broken and that they’re messaging from a friend’s account. Due to the new device, they don’t have access to any mobile banking apps and desperately need funds to pay an urgent incoming bill or financial charge.
What can you do about it? Don’t reply to the scammer. Contact the person in question directly, on their usual WhatsApp account, or by other means. Direct communication should reveal the scam in no time.
Verification code scams
When scammers try to log in to your account, they need a verification code to complete their deceit. If you receive a 6-digit verification code out of the blue, you might be the target of a verification code scam.
How does the scam work? The verification code scam starts with the victim receiving two messages in quick succession. For example, it could be an apology from an alleged friend or family member who “accidentally” had a verification number sent to the victim’s account instead of their own. They’ll ask for the 6-digit number the victim has just received.
What can you do about it? If you receive a verification code from WhatsApp and you’re not registering a new device or trying to log in to your account, suspect that someone is targeting you in a scam and never share that code with anyone.
WhatsApp dating scams
Tinder swindlers are everywhere, including on WhatsApp. So long as people look for love online, WhatsApp dating scams will try to capitalize on loneliness.
How does the scam work? Scammers usually scope out their victims on dating apps. Once the conversation starts rolling, the scammer will push to move it to messaging apps, typically WhatsApp. Not long after the move to WhatsApp, the scammer begins asking for money, requesting nudes for use in blackmail, or sending you malware in disguise.
What can you do about it? Learn to recognize online dating scams. If you’ve never met the person, they have no social presence outside of WhatsApp and dating apps, and the whole online relationship sounds too good to be true – it’s because it probably is. Never send sensitive data or money to strangers you meet online, even if they profess undying love to you. Also, don’t send them gift cards or coupons. For example, never give a Steam wallet gift card to a person that you do not know.
WhatsApp crypto scams
Cryptocurrency and investing scams are similar to impersonation and dating schemes – scammers once again try to steal your hard-earned cash.
How does the scam work? Also known as a pig butchering scam, the scammer initiates a platonic or romantic relationship on WhatsApp or another platform, and the conversation eventually moves to WhatsApp. They soon start talking about cryptocurrency and how their friend or relative has encountered a lucrative new opportunity. If the victim wants in, they only need to make a cash deposit on a cryptocurrency trading site. Of course, once the cash has been deposited, the “friend” blocks the victim and becomes unreachable.
Other times, the victim is added to dubious WhatsApp groups full of fake cryptocurrency enthusiasts. They pretend to be discovering opportunities for guaranteed-return investments, thanking advisors for “excellent” insider tips and sharing the bogus returns those opportunities helped them earn. While you might find some regular folks in these groups, be wary of overly enthusiastic members and promises of guaranteed returns, as these are clear signs of a scam.
What can you do about it? Refrain from being taken in by overpraised investment opportunities, especially when strangers suggest them to you. Research reputable exchanges and companies before transferring money if you want to invest money, buy cryptocurrency, or apply for a job.
WhatsApp job scams
Job offer scams on WhatsApp work similarly to cryptocurrency scams – except instead of baiting you with a lucrative investment, the scammer pretends to offer you your dream job. The scammers usually pretend to be representatives of respectable companies, offering you jobs with substantial wages and too-good-to-be-true working conditions (for example, working as many hours as you want or unlimited vacation time). To complete the scam, they usually invite you to click on suspicious-looking application links that can steal your personal data.
What can you do about it? If you receive a job offer from a company you’ve never applied to, immediately treat it with suspicion. If it contains any funny-looking links and offers that sound too good to be true, immediately pull back and block the user.
WhatsApp Gold scams
WhatsApp Gold is a fake membership or premium version of WhatsApp that plays a central part in the WhatsApp Gold scam.
How does the scam work? You receive a smishing message or a phishing email inviting you to upgrade to WhatsApp Gold – an exclusive version of WhatsApp with fabulous features only VIPs have access to. Once you click the link to upgrade, it starts a download of malicious software or takes you to a phony website resembling what a legitimate WhatsApp app download page would look like. The page eventually leads you to downloading malware too.
What can you do about it? Appreciate WhatsApp as it is, and don’t expect an exclusive upgrade. If someone notifies you of one, it’s bait – report the spam messages and the contact to WhatsApp and go on with your life.
Lottery and giveaway scams
Sweepstakes and the possibility of winning prizes tempt many people, so hoax lotteries are a lucrative swindle among WhatsApp scammers.
How does the scam work? Lottery scams start with a message announcing you as a winner of some prize. It’s like those deceitful pop-ups telling you you’ve won an iPhone, except in a WhatsApp message. Fraudsters often impersonate actual lottery companies to look more legitimate.
If you follow the link, you are requested to submit sensitive data, such as bank account details, to pay for the prize delivery.
Another variation of the scam invites you to buy lottery tickets. Once you submit your payment card information, you lose more money than any lottery ticket would cost.
What can you do about it? To begin with, don’t expect to win in a lottery if you didn’t enter one. And when it comes to buying lottery tickets, only do so via an official company site, not by following links on WhatsApp or other messaging apps.
PRO TIP: Scammers are not the only people who can send you a message leading to a fraudulent website or malware download. Friends and family can receive phishing messages from scammers and mistakenly forward them to you. Just because you know the person doesn’t mean every link and file they send you is legitimate.
Gift card and coupon scams
Gift cards and coupons can be as enticing as cash prizes from a bogus lottery, so scammers use them to con innocent WhatsApp users.
How does the scam work? Many variations of this scam exist. A random WhatsApp user can ask you to fill out a survey, promising a gift card as a reward. Or an unsuspecting friend may forward you a smishing message with an enormous discount coupon for your favorite shop.
None of those gift cards or coupon codes will work and are only a nice little package for malware downloads and scammy websites that collect your credentials or other information.
What can you do about it? Don’t trust promises of gift cards or coupons you get on WhatsApp, especially if you receive them from strangers. Your friends can forward such surveys or coupon scam messages, too. So in general, be on the lookout for offers that seem too good or too easy to get – most likely, they’re a scam.
Malware and virus scams
While all the WhatsApp scams we’ve discussed so far can lead to malware infection, some scammers try to get you to install malware without elaborate con games.
How does the scam work? Hackers can send messages with fake software updates, links to websites that distribute malware, or random malicious attachments.
The classic “Are you in this video?” scam that’s popular on other social media sites can also happen on WhatsApp. If you click the video, it will spam all your contacts with the same virus.
What can you do about it? Don’t open links or download attachments from people you don’t trust. If a friend sends you a suspicious message, think twice before trusting it. Try messaging your friend on a different channel to ensure they sent you the link or attachment – they may not be aware that they’ve been scammed or hacked.
How to spot Whatsapp scams
Spotting WhatsApp scams is the key to preventing yourself (and others) from getting duped. Here are the warning signs of a potential WhatsApp scam:
- Unfamiliar phone numbers. Always treat messages from unknown phone numbers carefully, especially if the content sent from them looks suspicious.
- Urgent money requests. If the WhatsApp user requests an urgent money transfer, refrain from sending money until you’re certain that it’s not a scam.
- Spelling and grammar mistakes. Scammers rarely bother to put an effort into their messages. If you get a text that’s got grammar and spelling errors galore, keep away.
- Generic greetings. If you receive a “Hi dad” or “Hi mom” message from an unknown number, pay careful attention to the following messages and double-check with your children by reaching out to them directly.
- Suspicious links and attachments. Messages from unknown numbers that contain suspicious-looking links (or any links at all) are a huge red flag. Avoid tapping or clicking on them until you’re sure that the link is safe.
- Offers that are good to be true. Ridiculous-sounding giveaways and lotteries that sound too good to be true are yet another way to scam you of your money. Don’t fall for them.
- Vague messages. If your WhatsApp contact provides vague answers, refuses to share details about their offer, and instead tries to push you to accept it, pull out because you’re being scammed.
- Verification code requests. If you receive a verification code message followed by a message from an unknown (or known) number, do not give in. Double-check with the user who requested the code (if it’s someone you know) directly and act accordingly.
How to protect yourself from WhatsApp scams
Learning the telltale signs of common WhatsApp scams is the first step to better equipping yourself to stay safe on WhatsApp. Here are other ways to help you protect yourself from falling victim to a WhatsApp scam.
- Verify the sender. If a scammer impersonates your friend or relative, try giving the actual person a phone call or get in touch with them on a different platform. You can also ask the sender a personal or sensitive question to which only your friend or family member would know the answer. Be aware that scammers can conduct thorough research. Something as simple as asking for the person’s middle name might not be enough.
- Ignore messages asking for money. Trust your instincts and analyze the language used in the messages. Is the person supposedly asking for money talking differently from how they usually do? If the request for money is legitimate, and the person is who they say they are, they would likely reach out through other means, not just WhatsApp. Pay attention to the urgency of the request, too. The more urgent the message and request, the more likely it is a scam.
- Avoid sharing personal information. Your bank, the government, or even your favorite shop will never ask for your password, bank details, or other personal information via email or phone call – let alone WhatsApp. So when someone does, it’s safe to assume it’s a scam. Also, avoid adding too much personal information to your profile. Scammers can also gather information about you on other platforms, so be mindful of what you share publicly online.
- Keep the device and apps up to date. System and software updates contain patches to close known exploits and fix security bugs on your device and apps. Installing them promptly is a must to prevent hackers from exploiting vulnerabilities on your smartphone, WhatsApp, or other applications.
- Be careful with links and attachments. If you didn’t expect a link or attachment, don’t click or download it. WhatsApp scammers can use their bots to spam you with different ploys, and even your friends can forward you malicious messages. Phishing scams are everywhere, so be cautious with every unexpected link and file you receive on WhatsApp, via email, and on other platforms. Always check if the link has any typos or unusual domain extensions (such as .xyz instead of .com) so you don’t fall for typosquatting. To enjoy peace of mind when opening unknown links, consider using NordVPN’s anti-phishing tool, which enhances your online safety by blocking malicious links.
- Use 2FA to protect your WhatsApp account. You won’t always be the intended target of a WhatsApp scam. Hackers could use your account to scam someone else. Protecting your account is as crucial as recognizing the signs of WhatsApp fraud. So set up two-factor authentication (2FA) on your account to prevent unauthorized logins. By taking advantage of 2FA, you can make it trickier for scammers and hackers to steal your WhatsApp identity.
- Report the contact and scam to WhatsApp. If you’ve encountered a scammer or fallen victim to a WhatsApp scam, report the fraud so no one else is deceived.
On iPhone and Android, the reporting process is straightforward:
- 1.To report a scam, open WhatsApp and go to “Settings” > “Help” > “Contact us.” Here, you should be able to submit a report regarding the scam.
- 2.To report an account, open the chat with the scammer, click the three-dot icon in the top-right corner, and go to “More” > “Report.” The last five messages will be forwarded to WhatsApp, the chat will be deleted, and the person will be blocked.
What to do if you have been scammed on WhatsApp
Scammers are clever, so falling victim to a scam can happen to the best of us. You don’t have to delete WhatsApp and start over. Now that you know what to look for, you’re likely to be more cautious if contacted again.
Upon getting scammed, what you should do is:
- Report the scammer to WhatsApp.
- If you clicked any links or downloaded any files, notify your WhatsApp contacts about potential suspicious messages from your account. Do the same if you lost access to your WhatsApp account.
- Take care of your cybersecurity defenses. Use strong passwords, invest in a password manager, take advantage of two-factor authentication, and use NordVPN’s additional Threat Protection Pro feature to prevent accessing websites hosting malicious content.
Online security starts with a click.
Stay safe with the world’s leading VPN
