WhatsApp scams: how to recognize them and stay safe

Billions of people rely on WhatsApp for everything from family chats to business deals, and scammers are taking advantage of the app’s popularity. Whether it’s a suspicious link from an unknown number or a sophisticated impersonation of a close contact, WhatsApp scams are evolving fast.

This guide will walk you through how WhatsApp scams work, the latest WhatsApp scams, the red flags that give suspicious messages away, and exactly what to do if you’ve already interacted with a WhatsApp scammer. 

WhatsApp scams are fraudulent attempts that use fake messages, phone calls, or video calls on WhatsApp to steal your money, passwords, or personal information. They’re a type of social engineering attack that uses the messaging app as their delivery method. Instead of hacking into WhatsApp’s systems directly, scammers trick users into voluntarily handing over money, verification codes, or personal details.

And the financial impact of these tactics is staggering. FTC (Federal Trade Commission) data on social media scams reveals that users reported losing $425M to WhatsApp scams in 2025 alone, underscoring how effectively these tricks translate into real-world losses.

Unlike other platforms that require an approved connection first, almost anyone with your phone number can message you directly on WhatsApp, including through a video call. 

Since it’s where you frequently talk to your family members or closest friends, WhatsApp feels more intimate than email. This makes a well-crafted impersonation attempt far more believable.

WhatsApp scams generally chase one or more of these goals:

Fraud tactics evolve constantly, but some of the most recent tricks fall into a handful of recognizable categories. Here are some of the most recent WhatsApp scams, plus a couple of older ones that are still worth knowing about.

In a verification code scam, a scammer who already has your phone number tries to register your WhatsApp account on their own device. WhatsApp then sends a six-digit verification code to your phone, delivered just like other in-app text messages and phone calls.

The scammer, often posing as a friend, a delivery service, or even WhatsApp support, messages you asking for the code, claiming it was sent to you by mistake. If you send it, you risk a full account takeover, with the scammer gaining control of your WhatsApp. They can then message your entire contact list, pretending to be you, to run further impersonation scams. 

This scheme is closely related to a type of attack known as SIM swapping, in which a perpetrator activates your SIM card on another device. According to FBI data on SIM swapping, victims lost nearly $150M to cybercriminals between 2022 and 2024.

Like text message scams, a wrong number scam usually starts with an innocent-looking SMS, such as “Hey, is this Sarah?” or a friendly note that seems to have been sent to the wrong person. If you reply, the scammer keeps the conversation going, slowly building an emotional connection over days or weeks. 

Once trust is established, the conversation often shifts toward a fake investment opportunity, frequently a WhatsApp crypto scam involving trading platforms that display fake profits. This type of scam is also known as pig butchering. 

Requesting money to top up a trading account you’ve never used is the clearest sign of this scheme. What began as a random WhatsApp message can end with a victim being asked to transfer money to an account they’ll never see again, so be wary of such texts.

Family emergency scams, sometimes called “Hi Mom” or “Hi Dad” scams, involve a scammer pretending to be your child or another family member and claiming to be texting from a new number after losing their phone. 

Scammers often use generic greetings like “Mom” or “Dad” instead of a name, since they don’t actually know who they’re messaging. The story usually escalates quickly: a request for urgent help with a bill, a broken phone, or bail money, along with a plea to keep it a secret from the rest of the family.

In general, these impersonation scams work because they exploit urgency and love rather than logic. To avoid falling for them, call family members directly on their known number to confirm it’s really them before sending money to anyone who contacts you from an unfamiliar account.

Dating scams on WhatsApp often begin on dating apps or social media, then quickly move to WhatsApp, where conversations feel more private. Scammers build a romantic, emotional connection over weeks or months, frequently using stolen photos to create a fake, attractive profile. 

One of the clearest warning signs is someone requesting money before you’ve had a chance to meet them in person. The request usually comes up as a medical emergency, a plane ticket to finally meet, or some kind of investment scam they want to let you in on.

And these dating scams can be surprisingly effective. Over the past decade, FBI data on confidence and romance scams shows that more than $5M was lost to cybercriminals in these schemes.

Fake customer support and business account scams are impersonation scams that exploit your trust in a well-known company, such as a bank or online retailer, by using a verified-looking WhatsApp Business account and logo. 

A scammer’s message claims there’s a problem with a delivery or your bank account and asks you to select a link or share personal information to resolve it. This category also covers tech support, where a fake agent claims your device is infected and asks for remote access or payment to fix it.

Job scammers use a similar approach, sending unsolicited calls or messages that promise easy money for simple tasks, such as liking videos or rating products, and often name-drop Amazon or other delivery services. Legitimate employers don’t recruit through unsolicited messages on WhatsApp, and no trustworthy company asks for payment before you can start earning.

The WhatsApp Gold scam promotes a fake premium version of the app called WhatsApp Gold. This version supposedly unlocks benefits like extra features before they’re widely available, but no such premium app exists.

There is no official WhatsApp Gold — any upgrade link you receive usually installs malware that can be used to sensitive information from your phone.

If you ever see a message encouraging you to download WhatsApp Gold or any unofficial version of the app, don’t select any links it contains. Moreover, warn whoever sent it, since their account may already be compromised.

These schemes tell you that you’ve won a prize, a giveaway, or a lottery you never entered, and ask you to select a link or share personal details to claim it. 

The links are usually phishing links designed to steal your passwords or quietly install spyware. Some versions ask you to forward the message to a set number of other WhatsApp users to unlock the reward, but this just helps the scheme spread further.

These scams are particularly dangerous because they have the highest reported average loss per person across all types of scams. According to FBI data on lottery and sweepstakes scams, the average victim lost $27,700 as of 2024.

To identify WhatsApp scams, watch out for the following signs:

Scammers often create urgency to pressure victims into acting quickly because a rushed decision skips the moment where you’d normally stop and verify who you’re talking to. If a WhatsApp message ticks any of the points above, treat it as suspicious and think carefully before responding.

If you’ve already shared information, sent money, or suspect your WhatsApp account has been compromised, take the following actions:

These habits can help keep you safe on WhatsApp:

Scammers keep adapting their tricks. What hasn’t changed is the pattern behind almost every scam: urgency, secrecy, and a request for something you wouldn’t normally hand over to a stranger.

The most effective defense against WhatsApp scams is a healthy sense of skepticism. Protecting your account isn’t about knowing every trick — it’s about never letting urgency override your better judgment.

To better protect yourself, use reliable cybersecurity tools to catch red flags and keep your data private.