A sophisticated new scam is sweeping through WhatsApp, putting millions of users at risk of losing access to their accounts. Cybercriminals are exploiting a clever trick to bypass security measures and take full control of victims' profiles—leaving them locked out and vulnerable to further attacks.
How the Scam Works
The fraudsters begin by sending a seemingly innocent WhatsApp message, often posing as a friend or family member. They claim to have accidentally sent a verification code to the victim's number and urgently request it back.
In reality, this 'verification code' is part of WhatsApp's two-step authentication process. By handing it over, victims unwittingly give scammers the keys to their account—allowing them to reset security settings and take over completely.
Why This Attack Is So Dangerous
Once hackers gain access, they can:
- Read all private messages
- Impersonate the victim to scam contacts
- Access linked social media and financial accounts
- Lock the legitimate user out permanently
Meta, WhatsApp's parent company, has acknowledged the threat but stresses that vigilance remains users' best defence.
How to Protect Yourself
Security experts recommend these crucial steps:
- Never share verification codes—WhatsApp will never ask for these
- Enable two-step verification in WhatsApp Settings
- Be wary of urgent requests, even from known contacts
- If compromised, notify contacts immediately
The scam has already claimed numerous victims across the UK, with authorities warning that the sophisticated social engineering makes it particularly effective. As WhatsApp remains Britain's most popular messaging platform, users are urged to stay alert to this evolving threat.
