WhatsApp Scam: Beware of Fake Security Warnings

Watch out if you get a message from WhatsApp warning you about a potential security issue... it's a new scam that is designed to take over your account.

With over 2 billion users globally, WhatsApp is a prime target for cybercriminals. Scammers frequently use the app to steal personal data, extort money, or hack devices. Although WhatsApp is known for its strong security, the biggest vulnerability remains the user. Cybercriminals try and to exploit this weakness through various means, such as phishing and impersonation, in order to gain access to your account. 

Recently, a series of fake SMS have been circulating, pretending to be from the WhatsApp Security Center. These messages claim your account is at risk and urge you to verify it by clicking a link. Do not click on it! The link is designed to steal your data and allow hackers to log in to your account on another device.

The scam begins with an SMS that appears to be from WhatsApp, stating: "The WhatsApp Security Center has detected that your account is at risk. Please visit the official security center to verify: whatscapp.cc." This link, however, is fraudulent and leads to a fake WhatsApp help page that asks for your phone number. This is how the scammers will try and get access to your account. 

If you enter your number, you'll receive a message about "unusual account activity." The scammers will then instruct you to open WhatsApp settings on your linked device, claiming it's necessary to "restore account security." In reality, they are using your phone number to link your account to a third-party device. To do this, they need a security code, which they'll try to trick you into providing. If you do, the scammers will gain access to your WhatsApp account and all your information, allowing them to impersonate you, scam your contacts, and extort money through PayPal.

If you encounter this scam, stop communicating immediately. Protect yourself by enabling two-factor authentication: go to "Settings," then "Account," then "Two-step verification," and "Enable." This adds an extra layer of security. Never share your six-digit activation code with anyone. Finally, report any suspicious messages to WhatsApp and block the sender.