WhatsApp users are being cautioned about a new scam where criminals pose as family or friends to request a security code, aiming to steal access to users’ WhatsApp accounts.
Action Fraud, the UK’s national reporting centre for cybercrime and fraud, has issued alerts after receiving numerous reports of the scam. The criminals start by hacking into an account that lists you as a contact. They then initiate a seemingly normal conversation with you while attempting to log into your WhatsApp account using your phone number.
Around the same time, you’ll receive a text message from WhatsApp containing a six-digit security code. The scammer will claim that the code was sent by mistake and ask you to share it with them. If you comply, the criminal will use the code to access your account, lock you out, and then use the same tactic to steal more accounts from your contacts.
The scam can result in your WhatsApp account being hijacked and used for further fraud.
Action Fraud recommends enabling two-step verification on your account to add an extra layer of security. To set this up, follow these steps:
- Open WhatsApp and go to Settings > Account > Two-step verification > Enable.
Here are some top tips to protect yourself if you suspect you’re being targeted by this scam:
- Always call the person making an unusual request on WhatsApp to confirm their identity.
- Never share your account’s activation code with anyone.
- Report spam messages or block senders within WhatsApp by pressing and holding on the message, selecting ‘Report,’ and following the prompts.
WhatsApp has issued its own warning, urging users to be cautious of any suspicious messages or requests. To stay safe, follow these guidelines and ensure your account is protected from fraudulent access.
