WhatsApp Users Warned of Cash Scam as Criminals Exploit Group Messaging

Criminals have found a way to exploit a popular feature on WhatsApp – the group messaging function.

Cybercriminals are always on the lookout for new ways to obtain personal information, and now they have set their sights on WhatsApp, which boasts over 2 billion monthly users.

WhatsApp users have been warned by fraud experts to be cautious of strange group messages. This comes after Action Fraud, a national cybercrime centre with the City of London Police, reported receiving over 630 reports this year of fraudsters pretending to be group members in chats.

According to Action Fraud, the scam often begins with a group member receiving a WhatsApp audio call from a scammer posing as another group member. To appear more legitimate, the scammer may use a fake profile picture or name.

If you are told you will receive a one-time passcode to join a group video call, this should be a major red flag. The scammer will then ask for the victim’s passcode, which will allow them to register the victim’s WhatsApp account on a new device, effectively taking over the account.

Once the criminals have control of the account, they enable two-step verification, locking the victim out and targeting their loved ones. They may message other group members or friends and family, asking for urgent money transfers.

Tips to Stay Safe on WhatsApp

Enable Two-Step Verification

The most effective way to prevent criminals from accessing your WhatsApp account is by setting up two-step verification. To do this, open WhatsApp, tap Settings > Account > Two-step verification > Enable.

Verify Strange Requests with a Call

If you receive an unusual request from a friend or family member, pick up the phone and call them to confirm the request. This simple step can save you a lot of money and trouble.

Report and Block Spam Messages

If you receive a suspicious message, press and hold the message bubble, select Report, and follow the instructions. You can also block the sender.

Reports of fraud or cybercrime in England, Wales, and Northern Ireland can be made at http://www.actionfraud.police.uk or by calling 0300 123 2040. In Scotland, report to Police Scotland on 101.

DSI Gary Miles, head of the National Fraud Intelligence Bureau at the City of London Police, advises that those in large group chats should be ‘on their guard and monitor who joins chats.’ Action Fraud data suggests that the three most affected group chat types are Islamic religious groups, Christian religious groups, and work chats.

A WhatsApp spokesperson said, ‘All personal messages sent on WhatsApp are protected by end-to-end encryption, but we can all play a role in keeping our accounts safe.

‘We recommend that all users set up two-step verification for added security and advise people never to share their six-digit PIN code with others, not even with friends or family. If you receive a suspicious message (even if you think you know who it’s from), calling or requesting a voice note is the fastest and simplest way to check that someone is who they say they are.’