In this article:
In this article:
If you’d rather text than talk, how likely are you to fall for these WhatsApp scams? Here are 10 scams to know and how you can avoid them.
In this article:
In this article:
With nearly 3 billion monthly active users, WhatsApp has become one of the most popular messaging apps in the world. Unfortunately, its level of popularity has also made it a hotbed for scammers.
Americans lost more that $325 million to scams originating on text messaging apps like WhatsApp last year.
If you learn to recognize the warning signs of a WhatsApp scammer, you can avoid the worst consequences.
{{show-toc}}
Fraudsters use WhatsApp like any other messaging platform — often using fake or spoofed numbers to trick you into sending them money, investing in fraudulent crypto scams, or sending personal data that can be used to steal your identity.
However, almost all of the different types of scams that can be run on WhatsApp follow similar patterns.
Here are the red flags of a WhatsApp scammer you should be on the lookout for:
If you experience any of these telltale signs of a scammer, break off contact and block and report the number.
Even if you’re on the lookout for fraudsters, some WhatsApp scams can be incredibly convincing.
Here are some of the latest scams you need to look out for:
The mom and Dad scam is a classic social engineering attack that’s extremely easy to orchestrate. It involves fraudsters impersonating a victim's child or other family member and asking for money for an emergency.
For example, they may claim to have gotten a new number or bank details and need you to transfer them money to help get them out of a legal issue.These scams have only gotten more believable as fraudsters use AI voice tools to mimic your child’s actual voice when you or they call.
How to avoid this WhatsApp scam: Verify that you’re talking to your family member by calling them directly. Even better, create a secret “family password” to use whenever discussing sensitive information, such as bank account details.
In this variation of an imposter scam, fraudsters pose as friends or loved ones in need of immediate help. But what they really want is your six-digit WhatsApp verification code, personal information, or money.
If you send them the verification code, scammers could potentially take over your account and use it to scam your contacts.
Scammers typically use one of two methods to pull off this scam: (1) They message you from a new number claiming to be your friend. (2) They reach out from a familiar WhatsApp account after hijacking that number.
What to do: If you ever receive suspicious messages from people claiming to be friends, either reach out to them directly or ask for a video call so that you can confirm their identity.
📚 Related: How To Remove a Hacker From Your Smartphone →
These scams start with someone sending you an innocuous message that seems meant for someone else. For example, confirming an upcoming event or meeting or even just simply sending “hi”.
The goal is to get you to engage with them so they can build rapport and trust before launching into another scam (such as a romance scam or fake investment opportunity).
What to do: If someone sends you a wrong number message, it’s best to ignore it and delete and block the sender.
The WhatsApp Gold scam comes around every few years — warnings about a smishing text with malicious links first appeared in 2016.
In this scam, you receive an invitation to upgrade to WhatsApp Gold, a special edition of the messaging app with new and exciting features — except it’s a hoax. WhatsApp Gold is not a real app, and any alarming “warnings” about WhatsApp Gold are also scams.
What to do: If you receive a message about downloading WhatsApp Gold, delete it immediately. Never forward these messages to other contacts in your phone no matter what the scam text says.
📚 Related: How To Spot Fake Apps: App Size, Permissions, Source →
If you receive unsolicited messages asking you to fill out a survey or claim a gift card from a popular brand, it’s most likely a scam. Any information you provide will go straight to scammers who can use it to hack you or target you with identity theft.
These messages intentionally spoof reputable companies like Marks & Spencer. However, the goal is to dupe you into sharing personally identifiable information (PII) or downloading malware.
What to do: If you receive a WhatsApp message from a company, confirm that you have signed up for notifications with that company. If not, ignore the message and delete it. If such offers seem authentic or enticing, check the company’s official website or social media accounts before you click on any promotional links.
According to an Aura survey, 20% of Americans who have used a dating app in the past five years have encountered someone asking them to invest in cryptocurrency. These heartstring scammers tend to originate from Tinder or other dating apps, and then move to WhatsApp as they build trust with victims.
What to do: Easy money can be tempting, but remember that it often points to investment fraud. Cryptocurrency transactions — and those via payment apps like PayPal or Zelle — are almost impossible to reverse.
Make sure anyone you meet online is a real person and not an imposter. Do a reverse image search of their profile picture to confirm that they are who they claim to be.
📚 Related: How To Avoid the "Pig Butchering" Scam Costing Victims Millions →
A newer WhatsApp scam in the United States involves impersonating Mega Millions to bilk victims. These scams often appear when the jackpot is especially high. Players and non-players are promised cash prizes in exchange for a fee to claim their prize, which of course, doesn't exist.
What to do: Keep in mind that you will not get a call from a lottery representative if you win. Also, Mega Millions doesn't award prizes worldwide based on phone numbers or email addresses.
This scam starts with a similar message to one you would receive in a lottery scam. The cybercriminal tells recipients that they won big in a contest. But for the contest to “release” your prize money, you need to first make a payment.
After the victim concedes, the fraudster sends them a QR code to scan and transfer money. With bank account information that the victim inadvertently shares, the scammer proceeds to drain their bank account.
What to do: Scanning a QR code is like clicking on a link. Always verify where the QR code came from before scanning it. Also, know that you don’t need to scan any codes to receive money.
📚 Related: How To Stop Call Extended Warranty Call Scams For Good →
The scammers here impersonate members of WhatsApp's tech support team. To make it look like they're legitimate, they add a "verified" symbol to their profile picture.
In the most common scam, WhatsApp support team impersonators will ask you to verify your identity by providing personal details and sensitive information. Otherwise, they may “help” by asking for credit card numbers or six-digit WhatsApp codes via SMS or Telegram messages.
What to do: There are two main clues to look out for here:
They will also never ask for credit card information or verification codes to supposedly prevent account termination.
In this scam, a one-time password (OTP) verification code is sent via voice call to WhatsApp users by using a mobile carrier's automated service to forward calls to another number.
These codes begin with a star or hash prefix (*#) followed by the scammer’s phone number. When you dial the code, it activates call forwarding. The attacker starts the WhatsApp registration process for the account registered with your phone number.
What to do: Don’t pick up calls from unknown numbers on WhatsApp. If you unwittingly initiated a call forwarding request, look for an on-screen pop-up to cancel activation.
📚 Related: What To Do If You Receive a Social Security Scam Call →
Apps like WhatsApp offer low-cost ways for scammers to reach billions of targets around the world.
A recent data leak, for example, exposed nearly 500 million WhatsApp phone numbers from 84 countries. Armed with such stolen data, bad actors may invent online personas, or hijack existing accounts to recruit “friends” to con more victims.
Whether it’s a WhatsApp scammer posing to be your son, or a message about a gift card or giveaway, always approach messages from unknown numbers with caution.
And if you’re worried that you may have fallen victim to a scam, take advantage of Aura’s financial fraud protection and credit monitoring services. Receive near-instant notifications about any suspicious changes to your credit or bank accounts.
Editorial note: Our articles provide educational information for you to increase awareness about digital safety. Aura’s services may not provide the exact features we write about, nor may cover or protect against every type of crime, fraud, or threat discussed in our articles. Please review our Terms during enrollment or setup for more information. Remember that no one can prevent all identity theft or cybercrime.