Alert

New WhatsApp scams trick users into giving scammers access to their accounts

Nov 11, 2026

A number of WhatsApp scams are targeting users by pretending to be someone they know and trust.

Some messages ask people to vote for a child in an online competition. Others claim someone has found a photo of them or wants them to view content online.

While the stories may differ, the goal is often the same: to trick people into giving scammers access to their WhatsApp account.

One of the techniques used in these scams is called "GhostPairing". It involves manipulating people into linking a criminal's device to their WhatsApp account without realising what they're approving.

Youth
3 min read

How the scams works

The scam often begins with a message from a friend, family member, or other contact. 

Because the message comes from someone you know, it can appear legitimate.

The message may ask you to: 

  • Vote for a child in an online competition.
  • View a photo or video.
  • Follow a link to see content about yourself.
  • Complete a verification step to continue. 

If you click the link, you may be taken to a website that appears genuine. The site may ask for your phone number, provide a code, or display instructions that seem routine. 

However, following these instructions can allow a criminal to connect their own device to your WhatsApp account. 

Once access is granted, scammers may be able to continue using your account without your knowledge. 

Why these scams are convincing

Unlike many scams, these messages often come from trusted contacts.

If someone else's WhatsApp account has already been compromised, scammers can use it to target their friends, family members and colleagues. 

This can make scam messages appear more believable and increase the chance that someone will follow the instructions.

What can happen if criminals gain access?

If criminals gain access to your account, they may be able to: 

  • Read your WhatsApp messages.
  • View photos, videos and voice messages shared in chats.
  • Send messages while pretending to be you.
  • Contact your friends, family and colleagues.
  • Use information from conversations to support other scams or impersonation attempts. 

Warning signs to look out for 

Be cautious if a message: 

  • Creates a sense of urgency.
  • Asks you to vote in an online competition.
  • Claims someone has found a photo or video of you.
  • Directs you to a website that asks for your phone number.
  • Requests a verification code sent to your phone.
  • Instructs you to scan a QR code or link a device to your WhatsApp account.
  • Appears unusual or out of character for the person who sent it. 

Even if a message comes from someone you know, their account may have been compromised.

How to protect yourself

  • Think before you click

    Be cautious of unexpected messages and links, particularly if they create a sense of urgency or curiosity. 

  • Never share verification codes

    Verification codes are intended to protect your account. If someone asks for a code sent to your phone, treat it as a warning sign. 

  • Only link devices you trust

    WhatsApp's linked devices feature should only be used when you choose to connect one of your own devices to your account. 

    If a website or message asks you to scan a QR code or link a device, stop and think before continuing. 

  • Contact the person another way

    If you're unsure whether a message is genuine, contact the sender through another channel and ask whether they actually sent it. 

  • Turn on two-step verification

    Two-step verification adds an extra layer of protection and can help prevent unauthorised access to your account. 

  • Review your linked devices 

    Regularly check the devices connected to your WhatsApp account and remove any you do not recognise. 

What to do if you think you've been affected

If you think someone may have gained access to your WhatsApp account: 

  1. Open WhatsApp and review your linked devices.
  2. Remove any devices you don't recognise.
  3. Turn on two-step verification if it is not already enabled.
  4. Let your contacts know if suspicious messages may have been sent from your account.
  5. Be alert for follow-up scams that may use information taken from your messages.
  6. Update passwords on other important accounts if you believe additional information may have been exposed.

Scammers are constantly changing their stories, but many scams rely on the same tactics: creating trust, urgency, or curiosity to encourage people to act without thinking.

Taking a moment to verify unexpected requests, checking links before clicking them, and understanding what you're being asked to approve can help keep your accounts and personal information safe online. 

Report the incident(external link)