Experts have issued a warning over a 'nasty' WhatsApp scam which gives hackers full access to your account. Consumer champions at Which? have sent out an alert saying: "This nasty scam continues to circulate and could result in scammers taking over your account"
The scam starts when you receive a genuine text message from WhatsApp containing a verification code. If you have not tried to log in yourself, it could mean fraudsters have entered your number into WhatsApp to try to get access to your account, triggering the verification code text.
The message is then followed by one of your WhatsApp contacts messaging you via the app, usually with a story to try to persuade you to give them the verification code. They might say they’ve accidentally entered your number by mistake.
Because the message seems to be from a relative or friend, a lot of people have been tricked into passing on the verification code, which then allows fraudsters to take over their accounts.
Which? says after using the hack, scammers have identified their victims’ closest contacts from their message history and have asked them for money or sensitive information. They could also find out personal details about you and your contacts from your messages.
This information could be used to access other important accounts, target you with more scams, or even blackmail you. Scammers are likely to carry out the same trick with verification codes with the new set of contacts they’ve unlocked, gaining access to more and more accounts.
Which? advice on how to keep your WhatsApp account safe
- Don’t share your login details or verification code with anybody. Not even your closest family or trusted friends.
- Set up two-step verification to secure your account.
- Report spam messages or block the sender within WhatsApp. Press and hold on the message bubble, select ‘Report’ and then follow the instructions.
- Be wary of WhatsApp messages requesting money, even if they come from your contacts. If you’re not sure, give the friend a quick call to check.
If you think you may have given sensitive details to fraudsters, let your bank know immediately. WhatsApp users who have lost access to their accounts can contact support@whatsapp.com.
If you have been a victim of fraud or cyber crime, report it to Action Fraud online or by calling 0300 123 2040.