WhatsApp Scams: How Scammers Use WhatsApp to Target You
You get a WhatsApp message from an unknown number. Sometimes it’s a “wrong number” opener from someone surprisingly friendly. Sometimes it’s a job offer. Sometimes it’s your child saying they’ve lost their phone and need help urgently.
None of these people are who they say they are.
WhatsApp has quietly become one of the most active platforms for fraud in the world. With over two billion users globally and the ability for anyone to message any phone number directly, it gives scammers an enormous attack surface and an air of intimacy that email and even phone calls don’t always provide. Messages feel personal. They feel real. And that’s exactly why they work.
In the first half of 2025 alone, Meta removed approximately 6.8 million WhatsApp accounts linked to scams — and those are only the ones they caught. Scammers sent 19.2 billion spam texts in December 2025 alone, with WhatsApp becoming a favorite channel for these schemes.
This guide breaks down every major WhatsApp scam type, how each one operates, the warning signs to watch for, and exactly what to do if you’ve been targeted.
Why Scammers Love WhatsApp
Before getting into the specific scam types, it helps to understand why scammers have gravitated so heavily toward WhatsApp specifically.
Direct access to billions of people. WhatsApp is tied to phone numbers, which are relatively easy to obtain through data breaches, public records, and purchased lists. A data leak in 2022 alone exposed nearly 500 million WhatsApp phone numbers from 84 countries. Once a scammer has your number, they have a direct line to your phone.
End-to-end encryption creates a false sense of security. Users trust WhatsApp’s encryption — and rightly so for protecting private conversations from interception. But scammers use that same encrypted channel to conduct fraud with less platform visibility than on monitored email systems.
Messages feel personal. An email from a stranger registers as cold outreach. A WhatsApp message feels like it’s coming from someone who knows you. The interface — the same one you use to text family and friends — creates psychological warmth that lowers your guard before the first word is read.
Scammers can appear as contacts. If a scammer takes over a friend’s WhatsApp account, they can message you from a name already in your contact list. You see your friend’s name and photo — not a stranger.
It’s global. Unlike phone scams which can vary in frequency depending on location, WhatsApp scams can reach anyone worldwide, making it essential to treat every unexpected message with caution.
The Most Common WhatsApp Scams
1. The “Hi Mum” / “Hi Dad” Scam (Family Impersonation)
This is one of the most emotionally manipulative scams operating on WhatsApp right now, and it’s devastatingly effective. You receive a message from an unknown number saying something like:
“Hi Mum! I broke my phone and this is my new number. Can you save it? I need help with something urgently.”
The message is designed to bypass your skepticism by exploiting love and parental instinct. By the time the “child” asks for money — to pay a bill, cover an emergency, avoid a late fee — you’re already emotionally committed to helping. The request is always for an amount plausible enough to seem real and urgent enough that there’s no time to call the old number to verify.
Impersonation scams have become one of the most common forms of fraud on WhatsApp, as cybercriminals exploit the trust people place in familiar names and faces.
Red flags: Unknown number claiming to be a family member, immediate pivot to a financial request, reason given for not using their old number, pressure not to call to verify.
What to do: Always call your family member on their known number before responding to any financial request — regardless of how convincing the message sounds.
2. Wrong Number Scams (Pig Butchering Entry Point)
You receive a message from an unknown number that appears to be intended for someone else. “Hi, is this David? I’m calling about the reservation.” When you respond that they have the wrong number, the stranger is immediately friendly and apologetic — and often attractive based on their profile photo.
This is a calculated opening move. The scammer’s goal is to build a genuine-feeling relationship over days or weeks before pivoting to a financial opportunity — usually a crypto investment platform, a trading scheme, or a business venture. By the time money is requested, the victim feels they know this person. The trust was manufactured from the very first “wrong number” message.
This is the entry point for pig butchering scams, which have generated billions of dollars in losses globally. The “wrong number” text is simply how the relationship begins.
Red flags: Unexpected message from an unknown international number, rapid warmth and friendliness from a stranger, unusual profile photo quality, conversation that gradually steers toward investment topics.
What to do: Do not engage. If you receive an unexpected WhatsApp message from an unknown number presenting itself as a misdirected text, do not respond. Block and report the number.
3. WhatsApp Verification Code Scams (Account Takeover)
This scam targets your WhatsApp account itself rather than your money directly — though account takeover often leads to financial fraud against everyone in your contact list.
The approach: you receive a WhatsApp message from someone claiming to be a friend, a WhatsApp support representative, or even a stranger who says they accidentally sent their verification code to your number. They ask you to forward the six-digit code you just received by SMS.
That code is your WhatsApp account’s two-factor authentication code. If you share it, the scammer logs into your account immediately — locking you out and gaining access to all of your contacts, chat history, and the trusted identity your name and photo represent. They then proceed to message everyone you know with urgent financial requests.
WhatsApp’s technical support team never contacts users through the app and never asks for verification codes.
Red flags: Any request for your six-digit SMS verification code, regardless of who is asking or why. There is no legitimate reason for anyone to need this code from you.
What to do: Never share your WhatsApp verification code with anyone. If someone claims they accidentally sent their code to your number, ignore it. If you’ve already shared the code, immediately re-register your WhatsApp account and enable two-step verification.
4. Fake Job Offer Scams
WhatsApp has become a primary channel for fake job recruitment scams. You receive an unsolicited message — often from a number with an international country code — offering a remote position with high pay and flexible hours. Common roles include data entry, product reviewing, social media rating, or task completion.
Scammers create misleading job offers for remote positions which demand personal information and require transferring money before starting the job.
The initial tasks seem easy and legitimate. Some scammers even pay small amounts early on to build credibility. But eventually, participants are told they need to make a deposit to unlock higher-paying tasks or to “activate” their account — and the deposits escalate. The job, the company, and the earnings dashboard are all fabricated.
Red flags: Unsolicited job offer via WhatsApp from an unknown number, vague company name, unusually high pay for simple tasks, requests for upfront payment or personal financial information.
What to do: Do not engage with unsolicited job offers received via WhatsApp. Legitimate employers do not recruit through cold WhatsApp messages. If you’re interested in a company, research it independently and apply through official channels.
5. Romance Scams
WhatsApp romance scams follow a familiar pattern: the scam typically begins on a dating or social media app, but the scammer quickly pushes to continue chatting on WhatsApp, using excuses like “my subscription is about to expire” or “WhatsApp is easier.”
Once on WhatsApp, the scammer showers the victim with affection, attention, and consistency — what’s known as love-bombing. The relationship feels real because it’s maintained daily over weeks or months. The scammer remembers details, asks thoughtful questions, and creates emotional intimacy.
Then a crisis appears. Medical bills, a stranded family member, a business deal that needs a bridge loan. The financial requests begin small and escalate as the emotional bond deepens. Victims who eventually become suspicious are often reassured through video calls — which may now use real-time deepfake technology to display a fabricated face.
Red flags: Relationship that moves quickly to WhatsApp from another platform, profile that seems almost too perfect, avoidance of in-person or verified video meeting, any request for money regardless of the reason given.
What to do: Never send money to someone you haven’t met in person. If you suspect a romance scam, ask a trusted friend or family member for an outside perspective — or use ScamSave’s AI Triage Tool to evaluate the situation before taking any action.
6. Crypto Investment Scams
Crypto investment scams on WhatsApp often begin as a wrong number encounter or a new contact from a “mutual friend.” Once trust is established, the scammer mentions — casually at first — that they’ve been making excellent returns through a particular trading platform. They offer to show you how.
You’re invited to a WhatsApp group chat or directed to an app where you can see your “investments” growing in real time. The platform looks sophisticated and the returns appear dramatic. When you try to withdraw your profits, you’re told fees, taxes, or minimums must be met first. Every payment unlocks a new requirement. The platform, the balance, and every previous “profit” were entirely fabricated.
Investment fraud is one of the most common WhatsApp scams, with scammers using deepfakes, social engineering, and phishing attacks to make the schemes increasingly convincing.
Red flags: Unsolicited investment advice from a new contact, exclusive trading platform not available through standard app stores, pressure to recruit others, inability to withdraw funds without paying additional fees.
What to do: Never invest through a platform recommended by someone you met on WhatsApp. Verify any investment platform with the SEC’s registration database before depositing any funds.
7. WhatsApp Lottery and Prize Scams
You receive a message — often appearing to come from a well-known brand like Walmart, Amazon, or WhatsApp itself — congratulating you on winning a cash prize or gift card. To claim it, you need to click a link, pay a small processing fee, or provide your banking details.
Scammers message victims claiming they have won cash prizes, but require a payment or bank account details to receive the winnings. The prize does not exist. Any fees paid are lost immediately. Any banking details provided will be used for unauthorized withdrawals.
WhatsApp does not run prize drawings. Well-known brands do not announce winners through unsolicited WhatsApp messages from unknown numbers.
Red flags: Congratulatory message from an unknown number, request for payment to “release” winnings, link that doesn’t match the brand’s official domain, urgency around claiming the prize.
What to do: Ignore and delete. Never pay a fee to claim a prize you didn’t enter, and never provide banking details in response to an unsolicited message.
8. QR Code Scams
Scammers send WhatsApp messages containing a QR code, claiming it’s required to verify your account, claim a reward, access a deal, or complete a transaction. When you scan the code with your phone’s camera, it may link your WhatsApp account to a scammer’s device — giving them full access to your account and all of your conversations without your knowledge.
This attack method is particularly insidious because scanning a QR code feels routine and harmless. WhatsApp’s “Linked Devices” feature, which is designed for legitimate use on desktop computers, is the vulnerability being exploited here.
Red flags: Any WhatsApp message asking you to scan a QR code, especially from an unknown sender or in an unexpected context.
What to do: Never scan a QR code sent to you in an unsolicited WhatsApp message. Regularly check your WhatsApp Settings → Linked Devices and remove any devices you don’t recognize.
9. Fake WhatsApp Technical Support Scams
A message arrives claiming to be from WhatsApp’s support team, often with a profile photo displaying a checkmark or official-looking branding. They claim your account has been flagged for suspicious activity, is about to be suspended, or needs to be verified — and they ask for your verification code or personal information to resolve the issue.
WhatsApp’s tech support team never contacts users through the app. Official members never ask for verification codes or credit card details to supposedly prevent account termination. The verification checkmark on legitimate WhatsApp accounts appears next to the contact name — never in the profile photo.
Red flags: Any message claiming to be from WhatsApp support, requests for your verification code or personal information, urgency around account suspension.
What to do: Ignore and report. WhatsApp support is accessible through the app’s Settings menu — not through incoming messages.
10. Charity and Disaster Relief Scams
Following major natural disasters, disease outbreaks, or humanitarian crises, scammers rapidly deploy WhatsApp campaigns soliciting donations for fake relief efforts. Messages may include compelling images, urgent language, and links to payment pages that funnel donations directly to the scammer.
These scams spread quickly through WhatsApp group chats and forwards, gaining apparent legitimacy from the fact that a contact shared them. The person who forwarded the message almost certainly had no idea it was fraudulent — they were victimized too.
Red flags: Donation requests forwarded through WhatsApp, payment links that don’t match a verified charity’s official website, pressure to donate immediately.
What to do: Never donate through a payment link shared via WhatsApp. Go directly to the official website of a verified charity you already trust, and verify any organization through Charity Navigator or the IRS tax-exempt database before giving.
8 Warning Signs Any WhatsApp Message Is a Scam
Regardless of the specific scam type, these red flags apply universally:
1. The message comes from an unknown international number. Scammers frequently operate from abroad using numbers with country codes you don’t recognize — +234 (Nigeria), +91 (India), +44 (UK), and others. An unexpected message from an international number is a strong early signal.
2. The sender creates urgency. Any message that pressures you to act immediately — before you can think, verify, or consult someone — is designed to override your judgment. Legitimate contacts don’t need you to make financial decisions in the next five minutes.
3. Money is requested in any form. Whether it’s a gift card, bank transfer, cryptocurrency, or Zelle payment — any financial request from a WhatsApp contact you haven’t verified in person warrants extreme caution.
4. They ask for personal information. Passwords, verification codes, Social Security numbers, bank account details, and copies of your ID should never be shared with anyone via WhatsApp.
5. The profile photo looks professional or model-quality. Scammers frequently use stolen photos from social media — often of attractive people — to make their fake profiles more convincing. A reverse image search of the profile photo can reveal if it appears elsewhere online.
6. They push the conversation to happen quickly. Scammers maintain volume by moving efficiently. If someone is pushing hard to accelerate your relationship or decision, that pace is manufactured.
7. They avoid video calls or in-person meetings. Legitimate people can verify their identity. Scammers cannot — or use deepfake technology to approximate it. Persistent avoidance of real-time visual verification is a major red flag.
8. Something just feels off. Trust that instinct. If a message makes you feel uncertain, don’t dismiss it. That discomfort exists for a reason.
How to Protect Your WhatsApp Account
Beyond recognizing individual scams, these account-level protections significantly reduce your vulnerability:
Enable two-step verification. Go to WhatsApp Settings → Account → Two-step verification → Enable. This requires a PIN in addition to your SMS verification code when registering your number, making it far harder for scammers to take over your account even if they obtain your verification code.
Never share your six-digit verification code. This bears repeating because it is the single most common WhatsApp account takeover method. There is no legitimate reason for anyone — ever — to need your WhatsApp verification code.
Review linked devices regularly. Go to Settings → Linked Devices and remove anything you don’t recognize. This catches QR code account hijacking before significant damage is done.
Control who can see your profile information. Go to Settings → Privacy and restrict who can see your profile photo, last seen status, and About information. The less information publicly visible, the less useful your profile is for social engineering.
Be cautious in group chats. Scam links and forwarded fraud campaigns spread rapidly through WhatsApp groups. Be skeptical of any link or financial request forwarded through a group, even from people you trust — they may have been victimized themselves.
Don’t click links from unknown contacts. If you receive a link from a number not in your contacts, do not tap it. Go directly to the official website or app of any service mentioned instead.
What to Do If You’ve Been Scammed on WhatsApp
If you shared your verification code: Immediately re-register your WhatsApp account on your phone. This will log out whoever took over your account. Then enable two-step verification immediately after regaining access.
If you sent money: Contact your bank or payment service immediately. Report the transaction as fraud. Wire transfers and crypto are hardest to recover — contact your bank the moment you realize what happened, as speed matters significantly.
If you shared personal information: Place a fraud alert at all three credit bureaus — Equifax, Experian, and TransUnion. Monitor your accounts closely for any unusual activity. If your Social Security number was shared, file an identity theft report at IdentityTheft.gov.
Report within WhatsApp: Open the chat → tap the contact name → scroll down → Report. You can also block the number simultaneously. Reporting helps WhatsApp’s systems identify and remove fraudulent accounts faster.
Report to the FTC at ReportFraud.ftc.gov. If money was involved, also file with the FBI at IC3.gov.
Not Sure If a WhatsApp Message Is a Scam? Check It First
Some WhatsApp scam messages are easy to spot. Others are genuinely convincing — sophisticated enough to fool careful, intelligent people. When you’re not certain, don’t guess alone.
The ScamSave AI Scam Triage Tool can analyze any suspicious WhatsApp message in seconds. Paste the text or describe the situation — and the AI evaluates it against known fraud patterns to tell you whether it looks like a scam, what type it most closely resembles, and what your immediate next step should be.
Thirty seconds of checking could save you thousands of dollars.
👉 Try the ScamSave AI Scam Triage Tool — Free
Stay Ahead of WhatsApp Scammers with ScamSave
Scam tactics evolve constantly. The scripts change. The platforms shift. The technology gets more convincing. What doesn’t change is the underlying playbook: build trust, create urgency, extract money or information before the victim can think clearly.
ScamSave keeps you ahead of that playbook year-round.
🔔 Real-Time Scam Alerts
Live intelligence from the FTC, FBI IC3, and BBB Scam Tracker — so you know what campaigns are actively running before they reach you or someone you love.
📋 Top 100 Scams Database
Every major scam type explained clearly, including the full range of social media and messaging app fraud that traditional security resources don’t cover.
🛡️ CISSP-Certified Expert Guidance
ScamSave is built by a Certified Information Systems Security Professional (CISSP) with decades of cybersecurity and fraud prevention experience. The guidance here is grounded in how these attacks actually work technically and psychologically — not generic internet safety tips.
📚 Member-Only Resources
Step-by-step guides for scam recovery, family protection resources, account security checklists, and tools designed to make fraud awareness a habit rather than a reaction.
🤖 Unlimited AI Scam Triage Access
Members get unlimited use of the AI Triage Tool — so every suspicious WhatsApp message, text, email, or phone call can be evaluated instantly before you act on it.
WhatsApp gives scammers direct access to your phone. ScamSave gives you expert-level protection in return.
Frequently Asked Questions
Can I get scammed just by opening a WhatsApp message?
Reading a text message alone is generally safe. The risk comes from clicking links, calling numbers in the message, sharing personal information, or scanning QR codes. Some image and video files can carry malware — if a message from an unknown contact contains a media file, don’t open it.
Why am I getting WhatsApp messages from unknown international numbers?
Your phone number may have been included in a data breach, purchased from a data broker list, or obtained through a leaked database. Scammers operate at massive scale, sending the same messages to millions of numbers simultaneously and waiting to see who responds.
Is it safe to respond to tell a scammer to stop messaging me?
No. Responding — even to say “stop” or “wrong number” — confirms to the scammer that your number is active and monitored. This can lead to increased targeting. Block and report without responding.
What should I do if my WhatsApp account was taken over?
Re-register your WhatsApp account immediately on your device. This logs out whoever accessed it. You’ll receive a new verification code via SMS — don’t share it with anyone. After regaining access, enable two-step verification and notify your contacts that your account was compromised so they know to disregard any messages sent while it was under someone else’s control.
How do scammers get WhatsApp profile pictures that look so real?
Most profile photos used by scammers are stolen from real people’s social media accounts — often attractive individuals who have no idea their images are being used for fraud. A free reverse image search using Google Images or TinEye can often reveal whether a profile photo appears on multiple websites or social accounts, which is a strong signal of a stolen image.
My elderly parent uses WhatsApp. How do I protect them?
Set up two-step verification on their account, show them what the “Hi Mum/Dad” scam looks like, and establish a family rule: any financial request received via WhatsApp — even from a known contact — requires a phone call to verify before acting. Our guide on protecting elderly parents from scams covers this in detail.
The Bottom Line
WhatsApp is one of the most convenient communication tools in the world — and scammers know it. They’ve built entire fraud operations around the platform’s reach, its personal feel, and the trust users instinctively place in messages that appear to come from people they know.
The defense is awareness. Know the scam types. Know the warning signs. Check before you act. And when you’re not sure — use the tools that give you expert-level guidance in seconds.
ScamSave exists so you never have to face these situations alone.
👉 Check a Suspicious WhatsApp Message — Free
👉 Join ScamSave for Year-Round Fraud Protection
Written by a CISSP-Certified cybersecurity professional. ScamSave is dedicated to helping everyday people protect themselves from fraud, scams, and financial crime.
