WhatsApp users across the UK are being alerted to a sophisticated new scam that could allow cybercriminals to silently hijack their accounts and access sensitive personal data.
How the 'Ghost Pairing' Scam Works
Dubbed the 'ghost pairing' scam, the attack exploits a legitimate feature within WhatsApp designed to link your account to other devices, such as a desktop computer or laptop. The scam begins when a user receives a message that appears convincingly genuine.
This message may masquerade as an official alert from WhatsApp itself, warning that your account is at risk and urging you to secure it. Alternatively, it might come from a contact—or someone pretending to be a contact—claiming they have accidentally sent you a verification code and asking you to send it back to them.
If you forward that code, you are unknowingly authorising the scammer's device to link to your WhatsApp account. This process is known as pairing, and it grants the hacker full access to your account without logging you out of your own phone.
The Silent Threat to Your Privacy
The particularly insidious nature of this scam is that it operates in the background. Your WhatsApp will continue to function normally on your own phone, offering no immediate warning that your account has been compromised.
Once paired, the hacker can read all your private messages, view shared photos and media, and even send messages to your contacts while impersonating you. This access can be used to spread the scam further within your network or to extract sensitive information.
The warning was highlighted by a social media user named Caroline, who posted a video on TikTok on 9th January 2026 to raise awareness of the 'terrifying' trick. Commenters on her video expressed shock and gratitude, with many stating they would immediately inform older relatives who might be more vulnerable.
How to Protect Yourself from WhatsApp Scams
Fortunately, protecting yourself from this and similar scams is straightforward. The cardinal rule is: never, under any circumstances, share a WhatsApp verification code with anyone. WhatsApp will never send you a message asking for this code to be returned.
If a contact asks for a code they claim to have sent you, advise them to request a new code directly to their own number. Do not forward anything you have received.
You should also regularly check which devices are linked to your account. Here is how to do it:
- On Android: Tap the three dots in the top right corner, select 'Linked devices'.
- On iPhone: Go to 'Settings' within the app, then select 'Linked devices'.
Review the list of devices carefully. If you see any device you do not recognise, tap on it and select 'Log out' or 'Remove' to instantly revoke its access. Performing this simple check regularly is a powerful habit for maintaining your cybersecurity.
As scams grow more advanced, staying informed and vigilant is the best defence for UK consumers to safeguard their personal data and digital communications.
