A sophisticated new cybersecurity threat is currently sweeping across the United Kingdom, targeting WhatsApp users through an elaborate impersonation scam that has already cost victims thousands of pounds. The scam involves criminals hijacking WhatsApp accounts and then impersonating the legitimate account holder to request emergency funds from their contacts. Security experts warn this threat could evolve into a nationwide crisis affecting millions of users, potentially leading to mass identity theft, widespread financial fraud, and the compromise of sensitive personal and business communications. The National Cyber Security Centre has issued urgent warnings about this growing menace that exploits the trust people place in their closest friends and family members.
How the WhatsApp Hijacking Scam Works
The scam begins when criminals gain access to a person WhatsApp account through various methods including phishing links, fake verification codes, or social engineering tactics. Once they have control of the account, the scammers lock out the legitimate owner by changing security settings. The criminals then systematically work through the contact list, sending messages to friends and family members claiming to be in urgent need of money. These messages are crafted to sound convincing and often include details about supposed emergencies such as being stranded abroad, needing to pay an urgent bill, or having lost bank cards. Because the messages come from a trusted contact number that people recognize, many victims transfer money before realizing they have been deceived.
The Scale of the Problem in the UK
Recent statistics from Action Fraud, the UK national fraud reporting centre, show that this particular scam has resulted in losses exceeding two million pounds over the past six months alone. Thousands of reports have flooded in from victims across England, Scotland, Wales, and Northern Ireland. The average loss per victim stands at approximately fifteen hundred pounds, though some cases have involved much larger sums. Cybersecurity firms monitoring the threat landscape have identified organized criminal groups operating from multiple countries who are specifically targeting UK residents. The problem has become so severe that WhatsApp parent company Meta has been forced to implement additional security measures and launch awareness campaigns to educate users about the risks.
Warning Signs to Watch For
There are several red flags that can help people identify this scam before falling victim. First, any unexpected request for money via WhatsApp should immediately raise suspicion, even if it appears to come from someone you know well. Scammers often claim they cannot make phone calls due to various excuses, which is a major warning sign. Legitimate friends or family members would typically be willing to verify their identity through a voice call or video chat. Another indicator is urgency, as scammers create artificial time pressure to prevent victims from thinking clearly or verifying the request. Messages containing unusual language patterns or phrases that the supposed sender would not normally use should also trigger caution. Additionally, requests to transfer money to unfamiliar bank accounts or through unusual payment methods are classic signs of fraud.
Protecting Yourself and Your Account
Security experts recommend several crucial steps to protect against this threat. Enable two-step verification on your WhatsApp account immediately, as this adds an extra layer of security that makes hijacking significantly more difficult. Never share verification codes received via SMS with anyone, regardless of who claims to need them. Be extremely cautious about clicking links sent through messaging apps, even from known contacts. If you receive any request for money via WhatsApp, always verify the request through a different communication channel such as a phone call to a number you already have saved. Regularly update your WhatsApp application to ensure you have the latest security patches. Consider informing your contacts about this scam so they know to be vigilant if they receive suspicious messages from your account.
What to Do If You Become a Victim
If you realize your WhatsApp account has been compromised, act quickly to minimize damage. Immediately attempt to secure your account by opening WhatsApp and going through the verification process to regain control. Contact WhatsApp support through their official channels to report the hijacking. Notify all your contacts that your account was compromised and warn them not to send money if they received suspicious requests. Report the incident to Action Fraud at their official website or by calling their helpline. If you transferred money to scammers, contact your bank immediately as they may be able to recover the funds or prevent further transactions. Keep all evidence including screenshots and transaction records as these may be needed for investigations or insurance claims.