Fight scams, block hackers, and prevent threats with Avast Mobile Security
- Security
- Privacy
- Performance
Around three billion people around the world use WhatsApp, sending more than 140 billion messages every day. So it’s no surprise that scammers try to exploit the popularity of the platform to defraud people. Learn how to identify WhatsApp scams and some of the most common tactics fraudsters use. And get a digital security app with built-in scam protection to defend against malicious links, fake websites, and other online threats.
According to the Federal Trade Commission, American consumers reported losing over $10 billion to fraud in 2023. Many of those affected were targeted on digital platforms like WhatsApp. By learning how to identify a scammer on WhatsApp, you can help keep your devices — and your cash — safe.
Many WhatsApp scams share common red flags such as an unfamiliar area code, unknown number, frequently forwarded messages, requests for personal information, urgency, or spelling and grammar errors.
Here are some telltale signs that you’ve been contacted by a WhatsApp scammer.
To spot a WhatsApp scam, start with the phone number. Many scammers use numbers from foreign countries, with one common option being +234, the country code for Nigeria. However, a large number of WhatsApp scams are carried out by numbers with the +1 international area code, which is shared by the United States, Canada, and various Caribbean nations. So, simply looking at the area code often won’t be enough to identify a scam.
Sophisticated scammers often mimic legitimate numbers to defraud victims. In a phone spoofing scam, criminals use fake caller ID information to make it seem like they’re contacting you from a trusted organization or local number. This form of social engineering can lure people into a false sense of security.
Scammers use various methods to find phone numbers to target. These include:
Online competitions that sell your information to third parties.
Social media profiles that share contact information.
Email scams that trick you into entering your phone number.
People search sites and other data brokers.
Lists sold on the dark web.
Thankfully, WhatsApp will automatically warn you if you’ve been contacted by a number that’s not in your contact list, making it easier to identify potential scams or spam.
Much like email, WhatsApp allows you to forward messages, and it even marks messages with a “Forwarded” label. That’s a good thing because WhatsApp scammers often use forwarded messages. They do so for at least three reasons:
Forwarding messages saves scammers time, because they don’t have to type out individual texts to each potential victim.
People may get the sense that a forwarded message has a legitimate origin.
Forwarded fake messages are harder to trace than original messages.
To pique your interest, forwarded messages might include attention-grabbing fake news or urgent alarms about your accounts being at risk. Importantly, scam messages could even be sent to you by a known contact whose account has been compromised after their phone is hacked. So when you receive a forwarded message, double-check that it’s legitimate before clicking any links.
If someone requests your personal information over WhatsApp, be extremely cautious. Even data as seemingly harmless as your email can be used to break into your accounts. And if they ask for information like your bank details, logins, or Social Security number, run for the hills.
Sometimes, scammers won’t resort to asking for highly sensitive information. Instead, they might phish for personal information and use it to execute a SIM swap attack. In a SIM swap, a scammer tricks your cell phone carrier into setting up a new SIM card for you — a SIM card that they then control. Then, they may use the new SIM card to try to access bank accounts through two-factor authentication (2FA).
While everyone misspells words from time to time, scammers are known for their poor spelling and grammar. As it turns out, they have a strategic reason for making so many errors. As the IT security researchers at the University of St. Andrews report, poor spelling and grammar make scamming more profitable — here’s how:
Scamming often takes time. If a scammer sends out a highly believable phishing message to thousands of people, they could receive hundreds of responses. Depending on the scam, they might have to message each responder individually to try and extract personal information or money from them. Along the way, many will realize that they’re speaking to someone who’s trying to con them.
By sending messages with blatant errors, scammers weed out all the skeptical people up front. This helps them identify their most trusting victims. Then, their illegal operation has a higher “conversion rate.”
For example, a scammer trying to spoof a popular delivery service might intentionally misspell the official brand name. That’s a clear red flag.
Who doesn’t love a good sale? Scammers certainly do. In this type of phishing scam, criminals promise incredible discounts, giveaways, and promotions to try and get unsuspecting victims to share personal information or click malicious links.
Often, they’ll direct you to a website where you can enter your personal information to claim a reward like a gift card. WhatsApp crypto scams will typically promise massive returns on cryptocurrency for minimal investment, while more traditional scams stick to products or prizes from well-known brands.
Whatever the case may be, the rule is the same: be extremely skeptical if anyone advertises a promotion to you through WhatsApp.
If you get a link from someone you don’t know on WhatsApp, that’s a warning sign. Scammers often try to trick people into clicking links that download viruses onto their devices. And while WhatsApp warns users if a link is suspected to be malicious, it may not catch everything.
In addition to links, WhatsApp scammers also use pictures and videos to get people to download malware. Typically, these malicious attachments are accompanied by messages that urge you to tap or download “before it’s too late.”
As a rule, never click suspicious links or attachments in WhatsApp or any text message. And download a tool like Avast Free Antivirus to help block malicious websites and unsafe downloads automatically. With one of the web’s most advanced threat-detection networks, Avast helps keep hundreds of millions of people safer from scams, hackers, and other online threats.
WhatsApp scams often include attempts to acquire login information from unsuspecting users. Scammers will try to mimic the official WhatsApp verification request in order to acquire your unique PIN code. You should never share your PIN code with anyone via message — and if someone asks you for your login information, block them immediately.
WhatsApp scammers will normally pressure you to act quickly by creating a sense of urgency. They do this hoping you won’t think too seriously about their message and get caught up in the hype — only recognizing the scam when it’s too late.
There are many types of WhatsApp scams, including dating scams, WhatsApp Gold scams, impersonation attempts, and crypto scams.
Here are some common scams on WhatsApp:
Tech support scams: In a tech support scam, a fraudster will claim there’s an issue with your account they can help with, but they’re just phishing for personal information or login credentials.
Spear phishing scams: A spear-phishing scam is a more targeted attack. This means the scammer personalizes the message so it seems highly convincing.
Charity scams: Scammers often exploit major events like natural disasters, pandemics, or large-scale social issues by posing as reputable charities. They send donation requests via WhatsApp, preying on people’s generosity and desire to help.
WhatsApp Gold scams: Scammers promise exclusivity by inviting you to join a premium version, WhatsApp Gold, but it’s a hoax. If you tap the link to join, your device will be infected with malware.
Family impersonation scams: A scammer pretends to be a family member or friend in urgent need of money. If you send it, they take your money and disappear.
Crypto scams: You’re promised a big return for a small investment. If you pay them, the scammer runs off with the money — or returns your money the first time, only to ask for a larger payment in return for an even bigger payout that never happens.
Dating scams: Scammers normally begin romance scams on dating apps or social media platforms. They build a fake relationship until you trust them, then ask for money to cover travel expenses to see you or for another seemingly genuine reason.
Job scams: A fake job scam, or work-from-home scam, on WhatsApp often consists of a “recruiter” contacting you about a non-existent job. They’ll say they found your number on LinkedIn or elsewhere online and often try to lure you in with great pay or remote work opportunities — to start work, you just need to pay a small fee or click a (malicious) link.
You can significantly reduce your risk of getting scammed on WhatsApp by following a few simple rules:
Don’t respond to messages from people you don’t know.
Don’t click any suspicious links or attachments.
Don’t share your personal information through WhatsApp.
Be on alert if you see blatant spelling and grammar errors.
Don’t fall for free giveaways or promotions on WhatsApp.
Install a mobile antivirus app that can detect malicious links and downloads.
If you’ve been scammed on WhatsApp, you should block the scammer’s number. Then take steps to secure your phone and report the scam.
If you’ve been scammed on WhatsApp or any secure messaging app, you should block their number.
Run a malware scan on your device using robust security software like Avast Free Antivirus.
If you lost money or gave away your card or banking details, contact the relevant financial institution to help secure your account and try to get your money back.
Update your login information and add 2FA on any potentially compromised accounts.
Report the scam to the Federal Trade Commission (FTC).
If the scammer has sensitive information they could use to commit identity theft, consider freezing your credit to help prevent anyone from taking out new credit in your name.
Scammers use WhatsApp because its user base of around three billion people offers a large pool of potential victims to target. The platform’s global reach and ease of creating accounts without rigid verification also make it appealing to con artists.
The app’s end-to-end encryption can also give some users a false sense of security, which can make them more likely to trust the messages they receive. Additionally, WhatsApp allows for easy sharing of links and media, which scammers exploit to send malicious links or attachments. These are common reasons you’ll find fraudsters on other popular digital platforms, too, perpetrating Instagram scams, hijacking social media networks, and carrying out other nefarious activities.
The bottom line: you should always be careful if you get a suspicious call or text message on WhatsApp.
Don’t underestimate WhatsApp scams — they can lead to stolen identities, drained accounts, and compromised data. The best protection is maintaining strong digital hygiene, staying vigilant against suspicious activity, and using a reliable digital security app.
Avast Free Antivirus is built on top of an award-winning threat-detection engine, and its AI-powered scam-detection technology helps block malicious links, dangerous attachments, and unsafe sites. Protect your digital life today.
