WhatsApp scams: the fake friend, fake job and group chat tricks to watch for
Quick answer
The WhatsApp scams people report most are a message or call from someone pretending to be a friend or family member, an unexpected job offer, and requests for your six-digit verification code. Never share the code. Call the person outside WhatsApp, then report and block.
- Comes by
- App, Text, Phone call
- Pretends to be
- Last updated
How it works
Action Fraud, the UK's fraud reporting centre, warns about scams in WhatsApp group chats. A fraudster calls a group member over WhatsApp audio while claiming to be another member, often using a false profile picture or display name, and then tries to get the six-digit code that arrives by SMS. With that code they can take over the account and contact the victim's friends and family, which is why the code is never to be shared.
A second common route is the unexpected job offer. The FTC says unsolicited messages about jobs on WhatsApp or Telegram should be ignored, because real employers don't recruit that way, and warns against sending your Social Security number to an "employer" on WhatsApp.
A third is the lookalike link. WhatsApp's help centre explains that some links imitate WhatsApp itself, for example by using a lookalike character in the domain, and WhatsApp may flag such links when you tap them.
Red flags
- A message or call from a "friend" or family member asking for money or a code
- Anyone asking for the six-digit verification code sent to you by SMS
- An unexpected job offer arriving on WhatsApp
- A link that imitates WhatsApp or another brand, with a lookalike character in the web address
- A group member who calls you out of the blue using a different profile picture or display name
- Pressure to act quickly or keep it secret
Example message
Hi, it's me, I'm on a new number. I've got a problem with my bank and need a quick favour. Can you send me the six-digit code you're about to get by text so I can sort it out?
What to do
- 1
Never share your verification code
The six-digit code sent by SMS is the key to your WhatsApp account. No genuine friend or company needs it from you.
- 2
Call the person outside WhatsApp
If a friend or relative makes an unusual request, phone them on a number you already have to confirm it's really them.
- 3
Turn on two-step verification
Action Fraud says it adds an extra layer of protection to your WhatsApp account.
- 4
Report and block
Press and hold the message bubble, choose Report, then follow the prompts. WhatsApp says reporting without blocking won't stop messages, calls or status updates, so block the sender too. Keep screenshots first.
- 5
If you lost money or data, report it
In the UK, report to Action Fraud and tell your bank straight away. If you shared a password or personal details, change your passwords and read our guide on what to do after a data breach.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers who message you on WhatsApp usually already have your phone number, and often your name. Numbers and names are collected from data breaches and listed on people-search sites alongside addresses and relatives. Serus finds where your details are listed and removes them, and alerts you when your data shows up in a breach, so fewer scammers can reach you.
More WhatsApp scams
Frequently asked
What is the WhatsApp verification code scam?
A scammer, often pretending to be someone you know, asks you to send the six-digit code that arrives by SMS. Action Fraud says never to share it, because it lets them take over your account.
Is a WhatsApp job offer from a stranger real?
Almost certainly not. The FTC says to ignore unsolicited job messages on WhatsApp or Telegram, because real employers don't recruit that way.
Does reporting a contact stop their messages?
Not by itself. WhatsApp says reporting without blocking won't stop messages, calls or status updates, so block them as well.
What evidence should I keep?
Screenshots of the messages and profile details, and a backup of the chat, in case you need to give them to the police.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
