WhatsApp has over 2.7 billion users worldwide, making it the largest messaging platform on earth — and one of the most targeted by scammers. Because WhatsApp messages feel personal and come from phone numbers (not anonymous email addresses), people let their guard down. Here are the 12 most common WhatsApp scams and specific defenses for each.
1. The "Hi Mom/Dad" Scam
"Hi Mom, it's me. I dropped my phone in water and this is my temporary number. I need to pay my rent today but my banking app won't work on this new phone. Can you transfer £800 to my landlord? I'll pay you back tomorrow."
This scam has exploded globally, with UK losses alone exceeding £50 million in 2025. The scammer pretends to be your child messaging from a new number. The urgency (rent due today, phone broken) prevents you from verifying through normal channels.
Defense: Call your child's original number. If it rings, it is not broken. Ask a question only they would know the answer to. Never transfer money based solely on a WhatsApp message from an unknown number.
Received a suspicious message?
Paste the message here for instant analysis.
Free · No signup required · Cmd+Enter to scan
2. Verification Code Theft
"Hey, I accidentally sent my WhatsApp verification code to your number instead of mine. Can you forward me the 6-digit code you just received?"
That code is YOUR WhatsApp verification code. The scammer is trying to register your WhatsApp number on their device. If you share it, they take over your account and message all your contacts with scams.
Defense: Never share verification codes with anyone. Enable two-step verification in WhatsApp (Settings → Account → Two-step verification) so a PIN is also required.
3. Fake Job Offers
"Hello! We found your resume online. We are hiring remote workers for data entry. Pay: $300/day. Interested? Reply YES to apply."
These lead to advance-fee scams (you must pay for "training materials" or "background checks") or task-based scams where you complete small paid tasks before being asked to "invest" larger amounts to unlock higher-paying tasks.
Defense: Legitimate employers do not recruit via unsolicited WhatsApp messages. Verify any company by checking their official website and job listings.
4. Investment and Crypto Groups
You are added to a WhatsApp group full of people excitedly discussing trading profits. The "analyst" or "mentor" in the group shares daily tips and shows screenshots of enormous returns. Everyone else in the group is either a bot or a co-conspirator. Eventually, you are directed to deposit money on a fake trading platform.
Defense: Leave unsolicited investment groups immediately. In WhatsApp settings, restrict who can add you to groups (Settings → Privacy → Groups → My Contacts).
5. Fake Customer Support
After posting a complaint about a company on social media, you receive a WhatsApp message from someone claiming to be their support team. They ask for your account details, order number, and sometimes payment information to "process your refund."
Defense: Contact companies only through official channels listed on their website. Use IsThisAScam to verify any phone numbers or links sent by alleged support agents at IsThisAScam.to.
6. Fake Delivery Notifications
"Your DHL package is waiting for delivery. Schedule a delivery time at: dhl-delivery-reschedule.com"
Similar to SMS delivery scams but via WhatsApp. The link leads to a phishing page or malware download.
Defense: Track deliveries only through official carrier apps or websites. DHL, FedEx, and UPS do not use WhatsApp for delivery notifications.
7. WhatsApp Gold or "Premium"
"WhatsApp is releasing a premium version with exclusive features! Download WhatsApp Gold here before it's gone: [link]"
There is no premium version of WhatsApp. The download link installs malware on your phone that can steal banking credentials, read messages, and access your camera and microphone.
Defense: WhatsApp only updates through the Google Play Store or Apple App Store. Never download WhatsApp from any other source.
8. Charity and Disaster Relief Scams
After natural disasters or humanitarian crises, scammers create fake charity campaigns on WhatsApp, complete with emotional images and urgent requests for donations via cryptocurrency, gift cards, or wire transfer.
Defense: Donate only through established charities that you navigate to directly. Verify charities at CharityNavigator.org.
9. Romance Scams
A contact you met on a dating app moves the conversation to WhatsApp and over weeks builds an emotional connection. Eventually they need money for a medical emergency, travel, or a business opportunity they want to share with you.
Defense: Be wary of online romantic interests who refuse video calls, always have excuses for not meeting in person, and eventually ask for money.
10. QR Code Scams
A message asks you to scan a QR code "to verify your account" or "claim a reward." Scanning the code actually links your WhatsApp to the scammer's WhatsApp Web session, giving them full access to your messages.
Defense: Only scan WhatsApp QR codes on the official web.whatsapp.com page that you navigated to yourself. Check linked devices regularly (Settings → Linked Devices) and log out of sessions you do not recognize.
11. Fake Government Messages
"IMPORTANT: You are eligible for a government stimulus payment of $2,400. Apply now: gov-stimulus-apply.com"
Governments do not distribute benefits through WhatsApp messages. These are phishing attacks targeting personal and financial information.
Defense: Check government benefit eligibility only through official .gov websites.
12. Account Hijacking via Voicemail
The scammer triggers a WhatsApp verification code to be sent to your number as a voice call while you are likely asleep. The call goes to voicemail. Many voicemail systems have default PINs (0000 or 1234) that the scammer uses to access the voicemail and retrieve the code.
Defense: Change your voicemail PIN to something unique. Enable WhatsApp's two-step verification, which requires a PIN even if someone has the verification code.
General WhatsApp Security Settings
Harden your WhatsApp security with these settings:
- Two-step verification: Settings → Account → Two-step verification → Enable
- Privacy settings: Restrict who can see your profile photo, status, and "last seen" to "My Contacts" or "Nobody"
- Group restrictions: Settings → Privacy → Groups → My Contacts (prevents strangers from adding you to scam groups)
- Check linked devices weekly: Settings → Linked Devices (remove any you do not recognize)
- Enable biometric lock: Settings → Privacy → App Lock
- Turn on security notifications: Settings → Account → Security Notifications. This alerts you when a contact's security code changes, which can indicate account takeover.
How to Report WhatsApp Scams
- Open the chat with the scam account
- Tap the contact or group name at the top
- Scroll down and tap "Report"
- You can also forward scam messages to your local cybercrime authority
- In the US, report to the FTC at ReportFraud.ftc.gov
Received something suspicious? Check it now for free →