Experts in cybersecurity are warning WhatsApp users about a new scam that affects the platform’s group chats. Cybercriminals are taking advantage of the app’s enormous popularity, which already has over 2.78 billion active users worldwide, to infiltrate WhatsApp groups and obtain personal information from victims.
According to Action Fraud, the British center against cybercrime, so far this year there have been over 630 cases of scams related to this modality. The modus operandi of the criminals consists of impersonating legitimate members of a group, using WhatsApp calls to deceive the victims.
The scammer contacts a user, pretending to be another member of the group, and requests a verification code under the pretext of joining a supposed group video call. However, this code is actually used to register the victim’s WhatsApp account on a new device, allowing the criminal to take control of the account.
Once the cybercriminal has gained access to the victim’s WhatsApp account, they activate two-step verification, thus blocking any attempt by the legitimate user to recover their account. Subsequently, they send messages to other group members, as well as to the victim’s friends and family, requesting money urgently.
Gary Miles, head of the National Fraud Intelligence Bureau of the London Police, urges users to stay alert, especially those who participate in large group chats. In addition, a WhatsApp spokesperson emphasizes the importance of enabling two-step verification and recommends never sharing the six-digit PIN code with anyone, not even with close acquaintances. Furthermore, they suggested that, in case of doubt, users should contact the person through a call or voice note to confirm their identity.
