WhatsApp cybercrime scams: how to spot fake messages

Although WhatsApp work hard to keep their platform safe, it’s not possible for them to prevent every fake message or identify scammers straight away. So being aware of what to look out for can help keep fraudsters away.

There are a few different ways scammers will try to get your money or information on WhatsApp. Here are some of the most common scams.

A really common tactic scammers use is to pretend they’re a family member in need of help. They’ll claim to have lost or broken their phone, and will suggest they’re in some sort of trouble that means they need money immediately.

This scam plays on your fears of letting down a loved one in need. Scammers might even use personal details they’ve found to make it seem more convincing, such as family members’ names or their relationship to you.

Phoning the number the message has come from should put away any doubts you have that the message is fake – although be careful. Scammers can be very manipulative, and might try to convince you that your loved one is in danger. If the person on the other end isn’t your family member, it’s best to hang up immediately. 

It’s a good idea to have a code word between you and your family, so that in any real crisis situations, you can use the code word to show it’s genuine and not a scam.  

Another common type of WhatsApp scam is where you’re messaged by a stranger about job opportunities. They will often promise very good pay for flexible work, and will tell you that you don’t need experience or qualifications to get the job.

These messages are a type of scam called a ‘job scam’. They’ll usually either get you to make an initial investment to secure the role, or will gather your personal information so that they can steal your identity.

Be extremely suspicious of any messages from recruitment agencies or hiring companies that you’ve not already spoken to. Even if you’re job-hunting and are putting your name out there, it’s unusual for a recruiter to message you out-of-the-blue on WhatsApp.

If you’re unsure, search for the website of the company they’re claiming to represent and get in touch using their official email address or phone number.

This type of scam will usually start with you being added to a group chat, where someone will claim you’ve been ‘selected’ for a highly profitable investment opportunity – usually a cryptocurrency. Often they’ll say you can make a lot of money in a short amount of time.

There may be other scammers in the chat who will back up the original message by saying it really works, and that they’ve made money out of it. But these are just to convince you to make an investment. Once you hand the money over, the scammers will disappear with your cash.

Sometimes this scam will start more slowly. They may offer free stock trading advice or invite you to video calls to discuss investment opportunities. This is a way to build a relationship with you before asking for money or personal details. 

Any strangers contacting you with an investment opportunities are almost certainly a scam. There are no 100% certain ways to make money investing in crypto or any other high-risk market, so anyone promising this is lying.

If you’re invited to a large WhatsApp group with loads of other strangers, this is a strong sign that it’s a scam. It’s best to leave these groups straight away rather than getting drawn in by any false promises.

Verification codes are used to protect you from fraudsters, but some scammers can use them to try and steal your account. They’ll try to log into your WhatsApp account with your phone number, using the ‘forgot password’ process that sends a code to your number.

Once you’ve received this code, they’ll contact you and try to persuade you to send over the code. They might claim that they’re securing your account from hackers, and that it’ll be deleted if you don’t provide the code. If you do, they’ll gain access to your WhatsApp and take over your account.

There are no situations where you should be handing over a verification code. If you receive a message asking for you to pass on a recently received code, it’s a scam.

Sometimes a scammer will simply contact you pretending they’ve got the wrong number. Once you respond, they’ll try to start a conversation and build a relationship with you.

Their goal is to gain your trust so they can lure you into the scam – often it’ll be another way to get you into an investment scam, but sometimes it’ll be a romance scam. This is where the scammer pretends to fall in love with the victim as a way to steal their money or personal information.

Most people who genuinely message a wrong number won’t follow up with further messages once you let them know. People looking to scam you in this situation will aim to string the conversation along, even if you don’t give them any signs you’re interested. 

If you find yourself talking to a stranger on WhatsApp, be extremely cautious. They may be over-eager to strike up a friendship or romance, or try really hard to move the conversation towards money so they can bring up an investment opportunity. 

A phishing link could be a part of any other scam on this list – but often, you’ll see them in messages claiming to be from a legitimate company or organisation. You’ll receive a message with a link that might ask you to confirm your details or sign up for a government payment.

These links could take you to a fake form or log-in page that steals your details, or it could download malware and viruses to your device. 

If you’re not expecting the message, it’s best to be very cautious about pressing any links. Look carefully at the website address and, if it looks suspicious (for example, it’s spelt wrong), then avoid going any further.

A good way to make sure you’re not being taken to a fake website is to search for it yourself instead – for example, if the message is claiming to be from the UK government, go straight to GOV.UK yourself rather than clicking the link.

Here are our top tips for staying safe on WhatsApp:

• Avoid replying to messages from unknown numbers.

• Avoid clicking any links that you’re unsure about.

• Watch out for any messages promising something that seems too good to be true. 

• Never give out any verification codes.

• Be very careful about sharing any personal information or documents.

• Create a code word with family and friends for emergency situations.

• Use the ‘report’ and ‘block’ options to deal with any messages that look suspicious. 

• If you need to check someone is who they say they are, call them.

To report a message on WhatsApp that looks suspicious:

• go to the chat with the suspicious message

• press the three dots on the top right of the screen to open a menu

• select ‘more’, and then ‘report’ 

• confirm – the last five messages will be sent to WhatsApp, and you can also block the number.

You can also 

• report fraud to ActionFraudOpens in a new window on their website or by calling 0300 123 2040

• report scam websitesOpens in a new window to the National Cyber Security Centre.

If you think you’ve been scammed, you should contact your bank or card provider immediately if you’ve paid them money. 

If you used a credit or debit card, learn more about how you can claim your money back with section 75 and chargeback protection.

We have more information about What to do if you think you’ve been scammed.  

New rules mean that banks must refund you if you’re scammed into making a bank transfer. However:

• the bank can choose to deduct up to £100 from your refund

• you won’t get any money back if you’re found to have been extremely careless.

You’ll need to contact your bank to let them know, and they should be able to provide a refund within five working days unless they need to investigate it further.

There’s more in our blog about  How to get a refund for bank transfer scams.

If you’ve been scammed out of money using PayPal, you usually won’t get Section 75 or chargeback protection. However, PayPal offers its own buyer and fraud protectionOpens in a new window, and they might be able to help you out if you report the scam to them.

You can learn more on MoneySavingExpert’s guidance on PayPal protectionOpens in a new window

If scammers have any of your personal information, you’ll need to be careful in case they steal your identity.

It’s a good idea to change your passwords on your email, WhatsApp and any other accounts scammers might have gained access to. Also, it’s important to monitor your bank account closely for any transactions you don’t recognise.

We have guidance on what to do if your identity is stolen.

We have a guide to the many different Types of scam, some of which you might see elsewhere on WhatsApp and other social media and messaging apps.

We also have information about how to tell if you’ve been targeted by a scam.