--- title: "Scam Alert- Decoding the Rise of WhatsApp Phishing Scams! | Phish Protection" description: "Scam Alert- Decoding the Rise of WhatsApp Phishing Scams!: WhatsApp, one of the most popular messaging apps, has once again become the target for phishing." image: "https://phishprotection.com/og/blog/scam-alert-decoding-the-rise-of-whatsapp-phishing-scams.png" canonical: "https://phishprotection.com/blog/scam-alert-decoding-the-rise-of-whatsapp-phishing-scams/" --- Quick Answer WhatsApp, one of the most popular messaging apps, has once again become the target for phishing experts. Scammers, of late, have been taking a keen interest in WhatsApp Web QR code. These threat actors mess with user accounts by forging false WhatsApp Web interfaces. The idea is to gain access to user accounts and carry out different scam activities. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fscam-alert-decoding-the-rise-of-whatsapp-phishing-scams%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Scam%20Alert-%20Decoding%20the%20Rise%20of%20WhatsApp%20Phishing%20Scams!&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fscam-alert-decoding-the-rise-of-whatsapp-phishing-scams%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fscam-alert-decoding-the-rise-of-whatsapp-phishing-scams%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fscam-alert-decoding-the-rise-of-whatsapp-phishing-scams%2F&title=Scam%20Alert-%20Decoding%20the%20Rise%20of%20WhatsApp%20Phishing%20Scams! "Share on Reddit") [ ](mailto:?subject=Scam%20Alert-%20Decoding%20the%20Rise%20of%20WhatsApp%20Phishing%20Scams!&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fscam-alert-decoding-the-rise-of-whatsapp-phishing-scams%2F "Share via Email") ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2023/11/what-is-phishing-6346.jpg) WhatsApp, one of the most popular messaging apps, has once again become the **target for phishing experts**. Scammers, of late, have been taking a keen interest in [WhatsApp Web QR code](https://pageloot.com/how-to/scan-a-qr-code-on-whatsapp/). These threat actors mess with user accounts by forging false WhatsApp Web interfaces. The idea is to **gain access to user accounts** and carry out different scam activities. ### WhatsApp Web Scam Alert! WhatsApp Web allows its users to access their accounts on up to **4 different devices**. It is this feature that the scammers have started to take an interest in. [Phishing actors create fake website interfaces](https://e.vnexpress.net/news/culture/westlife-concert-organizers-warn-fans-about-fake-tickets-4660755.html) that look quite similar to the original WhatsApp Web interface. So when a user types “WhatsApp Web” on any search engine, a few links pop up in the search results. If the user clicks on a [malicious link created by these fraudsters](https://www.bleepingcomputer.com/news/security/evilproxy-uses-indeedcom-open-redirect-for-microsoft-365-phishing/), they **will be redirected** to this fake website. It contains the **original QR code** of WhatsApp Web. When the naive user unknowingly [scans this QR code on the forged website](https://cybersecuritynews.com/hackers-abuse-qr-codes/), the phishing actors get access to the former’s WhatsApp account. On the other hand, the user will notice just a harmless freeze or momentary pause , which won’t lead to any suspicion. ![What is phishing](https://media.mailhop.org/phishprotection/images/2023/11/what-is-phishing-6346.jpg) ### Why Do Threat Actors Break Into Your WhatsApp Account? [Identity impersonation](https://www.abcactionnews.com/money/consumer/taking-action-for-you/facebook-impersonator-rips-off-a-florida-free-divers-online-identity) has always been a favorite among phishing experts. And this is exactly what is happening with WhatsApp Web. Threat actors crack into user accounts and [impersonate their identities](/phishing-awareness/ceo-fraud-scammers-impersonating-executives-protect). By pretending to be someone else, these fraudsters try to contact their acquaintances and [request financial assistance](https://www.foxnews.com/politics/former-santos-campaign-fundraiser-charged-wire-fraud-identity-theft). They may also request you to share **sensitive details** such as login credentials, passwords, OTP, and so much more. ### Why is WhatsApp Phishing Scam So Fatal? WhatsApp [phishing scams](/phishing/ocbc-phishing-scam-singapore-banks-crisis-of-240-million-additional-capital-requirement) can be immensely dangerous for naive users. The vulnerability factor is so high because the\*\* user can still access\*\* their WhatsApp account while scammers are using the same for [malicious activities](https://cybersecuritynews.com/weaponized-telegram-and-whatsapp-apps-2/). _The user will take note of it only once the damage has been done._ For instance, a user can still use their [compromised account to communicate](https://thehackernews.com/2023/09/vietnamese-cybercriminals-targeting.html). They will know about their account getting hacked only when some of their **contacts inform them** about the malicious requests made by the threat actors. ### WhatsApp Phishing Scam Breaking Into Your Bank Account! In Singapore, in the month of November alone, WhatsApp Web scams have resulted in the loss of a whopping[$606,000](https://www.straitstimes.com/singapore/fake-whatsapp-web-pages-scam-267-victims-of-606k). The threat actors had reached out to around 200+ people by impersonating their contacts and **requesting money**, stating that they were in a dire financial crisis. Nottinghamshire police, too, have requested people to be vigilant and aware of[WhatsApp Web scams.](https://www.nottinghamshire.police.uk/news/nottinghamshire/news/news/2023/november/police-warn-of-whatsapp-scam-after-spike-in-hacked-accounts/)They have noticed a significant rise in the instances of WhatsApp scams where fraudsters crack into a WhatsApp group using the **QR code tactic** and then send messages to other group members while requesting money and sensitive information. These scammers stay a step ahead by keeping their **display names and profile pictures updated**. In a similar incident, Mr Louis, a sales specialist by profession, recently[lost $3,500 because of a WhatsApp Web scam.](https://stomp.straitstimes.com/singapore-seen/man-loses-3500-after-transferring-money-to-friend-who-turns-out-to-be-scammer-in)He got a request from his close friend- Mr. Amer, **asking for a loan of $3,500**. Mr. Louis got suspicious only when his friend requested more money , stating that even $3500 was not enough. ![What is a zero day attack](https://media.mailhop.org/phishprotection/images/2023/11/what-is-a-zero-day-attack-7358.jpg) The [phishing actor](/phishing-awareness/find-out-about-the-latest-case-of-threat-actors-utilizing-phishing-as-a-service-to-steal-120000) who hacked into Mr Amer’s WhatsApp account played it safe by **archiving all the conversations**. The incident has scarred Mr Amer for life, as he is too afraid to use WhatsApp Web ever again in life! Actress[Aileen Tan](https://sg.news.yahoo.com/scammer-impersonates-aileen-tan-husband-whatsapp-money-threatens-divorce-090700364.html)was just about to get scammed and lose SGD 1730 similarly. But thanks to her husband Gerald Lee, who warned her about the scam just in time. The threat actors had managed to **take control** of Gerald’s WhatsApp account, using which they had already conned his sister. ### What To Do In Case Your WhatsApp Account Has Been Compromised? **Delete your WhatsApp account immediately**. Restart your phone and then download WhatsApp once again. Use your phone number to log in by using a verification code. This will log out the fraudster, and they won’t be able to access your account again. ### 2 More WhatsApp Scams Which You Need to Be Aware Of! Apart from the WhatsApp Web QR code scam, there are multiple other [WhatsApp scams](https://tech.co/news/whatsapp-scams-watch-out) that you **must be aware of**. Have a look! --- #### Gift Card Scams [Fraudsters pose as reputed brands](https://abc7ny.com/fake-delivery-scammers-suspects-pretend-to-be-doordash-deliveries/12994398/) that you frequently shop from. They text you on WhatsApp and share a link while claiming that you are their lucky customer and have bagged a gift card. They can ask you for sensitive details or **share a malicious link**. #### WhatsApp Tech Support Scams Phishing actors also [send WhatsApp texts](https://www.businesstoday.in/technology/news/story/whatsapp-scam-alert-users-get-calls-messages-from-fraudsters-posing-as-us-employers-395875-2023-08-28) to users while posing as a WhatsApp **customer support executive**. They ask you to share your personal information so that they can get your account verified and make it secure. _**WhatsApp can rob you** of your reputation and hard-earned money if you don’t use this messaging app with caution._ By staying alert, keeping yourself updated about all the latest WhatsApp scams, and investing in [phishing awareness training](/products/phishing-awareness-training), you can significantly protect your account from getting hacked. Enhancing your knowledge through such training, combined with maintaining [phishing protection](/) measures and adhering to [cybersecurity](/content/cybersecurity-in-a-nutshell) best practices, will provide **robust security** against the majority of scams. ## Topics [ Phishing Awareness ](/tags/phishing-awareness/) ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 14m 12 Real-World Spear Phishing Examples And The Red Flags You Missed Feb 4, 2026 ](/blog/12-real-world-spear-phishing-examples-and-the-red-flags-you-missed/)[ Foundational 2m 8 million Android users fell prey to SpyLoan malware on Google Play Store Dec 5, 2024 ](/blog/8-million-android-users-fell-prey-to-spyloan-malware-on-google-play-store/)[ Foundational 1m A Big Part of the Phishing Problem is You Sep 17, 2019 ](/blog/a-big-part-of-the-phishing-problem-is-you/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Scam Alert- Decoding the Rise of WhatsApp Phishing Scams!","description":"Scam Alert- Decoding the Rise of WhatsApp Phishing Scams!: WhatsApp, one of the most popular messaging apps, has once again become the target for phishing.","url":"https://phishprotection.com/blog/scam-alert-decoding-the-rise-of-whatsapp-phishing-scams/","datePublished":"2023-11-23T11:46:07.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2023-11-23T11:46:07.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/scam-alert-decoding-the-rise-of-whatsapp-phishing-scams/"},"articleSection":"foundational","keywords":"Phishing Awareness","wordCount":939,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2023/11/what-is-phishing-6346.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"Why Do Threat Actors Break Into Your WhatsApp Account?","acceptedAnswer":{"@type":"Answer","text":"[Identity impersonation](https://www.abcactionnews.com/money/consumer/taking-action-for-you/facebook-impersonator-rips-off-a-florida-free-divers-online-identity) has always been a favorite among phishing experts. And this is exactly what is happening with WhatsApp Web."}},{"@type":"Question","name":"Why is WhatsApp Phishing Scam So Fatal?","acceptedAnswer":{"@type":"Answer","text":"WhatsApp [phishing scams](/phishing/ocbc-phishing-scam-singapore-banks-crisis-of-240-million-additional-capital-requirement) can be immensely dangerous for naive users. The vulnerability factor is so high because the** user can still access** their WhatsApp account while scammers are using the sa..."}},{"@type":"Question","name":"What To Do In Case Your WhatsApp Account Has Been Compromised?","acceptedAnswer":{"@type":"Answer","text":"**Delete your WhatsApp account immediately**. Restart your phone and then download WhatsApp once again. Use your phone number to log in by using a verification code. This will log out the fraudster, and they"}}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"Scam Alert- Decoding the Rise of WhatsApp Phishing Scams!","item":"https://phishprotection.com/blog/scam-alert-decoding-the-rise-of-whatsapp-phishing-scams/"}]} ```