If you use WhatsApp regularly, you’re far from alone. With nearly two billion users worldwide, it’s one of the most popular messaging apps on the planet — and unfortunately, a favourite hunting ground for cybercriminals. The latest AI-powered scam making the rounds is so convincing that even savvy users are being fooled by it. Here’s what’s happening and how you can protect yourself.
A fake message that looks perfectly real
This scam is effective because it appears completely normal. Victims receive what appears to be an official message from WhatsApp support, using the same tone, style, and even the same sender ID the company uses for its verification codes. The text often reads something like, “We’ve detected suspicious activity on your account. Please confirm your identity by entering this code.”
Everything about it seems authentic — until it’s too late.
The message usually includes a link and a six-digit code. Once you click and enter the code, scammers gain full access to your WhatsApp account. From there, they can read private messages, steal personal information, and even send fraudulent messages to your contacts, spreading the scam further through your network of friends and family.
I’ve heard of people who only realised something was wrong when their friends started calling to ask, “Did you just message me asking for money?” By then, the hacker had already taken control of their account.
Simple steps to protect your account
Thankfully, avoiding this type of attack doesn’t require advanced tech skills. Here’s what you can do to stay safe:
- Never click on suspicious links, even if the message looks official. WhatsApp will never ask you to verify your identity via text or link unless you initiated the request yourself.
- Turn on two-step verification. This adds an extra layer of security by requiring a PIN code whenever someone tries to log in to your account. To activate it, go to Settings → Account → Two-step verification → Enable.
- Check your linked devices regularly. In the Linked Devices section of the app, you can view the devices currently logged into your account. If you spot anything unfamiliar, log it out immediately.
These small habits can go a long way in preventing scammers from gaining access.
What to do if you’ve been hacked
If you suspect your account has already been compromised, act fast:
- Remove all unknown devices from your Linked Devices list.
- Change your six-digit security code.
- Let your contacts know that your account may have been hijacked — so they don’t fall for fake messages sent from your number.
- Report the incident to WhatsApp Support through the app so they can investigate.
Quick action can limit the damage and stop the attacker from using your account to scam others.
Why is this new scam so dangerous
Experts say this latest wave of attacks relies on AI-generated text to mimic WhatsApp’s official tone and phrasing. That’s what makes it so effective — it sounds exactly like the real thing. According to cybersecurity specialists, scams like this are becoming more sophisticated, blending automation with social engineering to exploit human trust.
Even the most cautious person can be caught off guard by a seemingly routine message. The key, as always, is a healthy dose of scepticism.
Think before you tap
A moment’s hesitation could save you hours of stress. Before responding to any message that requests verification or personal details, take a moment to double-check. Open WhatsApp’s official help page if you’re unsure, or ask a friend for advice before clicking anything.
In the age of AI-driven deception, vigilance is your best defence. A little caution now can prevent a big headache later — and keep your chats, photos, and contacts exactly where they belong: safe and in your hands.
