A dangerous new cybersecurity threat is currently sweeping across the United Kingdom, targeting WhatsApp users through a sophisticated impersonation scam that has already cost victims thousands of pounds. This latest scam involves criminals hijacking WhatsApp accounts and then impersonating the account owner to contact their friends and family members with urgent requests for money. Security experts warn that this threat could evolve into a much larger crisis, potentially leading to widespread identity theft, financial fraud on a massive scale, and the compromising of sensitive personal and business information shared through private messaging platforms. The scam has become so prevalent that UK cybersecurity agencies have issued urgent warnings to the public about remaining vigilant when receiving unusual messages, even from trusted contacts.
The scam typically begins when criminals gain access to a victim’s WhatsApp account through various methods including phishing links, malware, or by exploiting weak security settings. Once the hackers have control of an account, they immediately lock out the legitimate owner by changing security settings and two-factor authentication codes. The criminals then systematically work through the victim’s contact list, sending messages to friends, family members, and colleagues claiming to be in an emergency situation that requires immediate financial assistance. These messages often claim that the sender has lost their bank card, needs to pay an urgent bill, or has encountered an unexpected emergency expense.
How the WhatsApp Impersonation Scam Works
The attackers make their requests seem legitimate by using the established trust between the account holder and their contacts. Because the messages come from a known contact’s verified WhatsApp number, many recipients do not question the authenticity of the request. The scammers often create a sense of urgency, claiming they cannot make phone calls or need the money transferred within minutes. They typically ask for funds to be sent to a bank account or through digital payment services, making the money difficult to trace and recover once transferred. Some variations of this scam involve the criminals claiming they have a new phone number and asking contacts to save it, which then allows them to continue the deception even after losing access to the original account.
Warning Signs to Watch For
UK cybersecurity experts have identified several red flags that can help people identify this scam. First, any unexpected request for money through WhatsApp should be treated with extreme suspicion, even if it appears to come from someone you know well. The scammers often use language that seems slightly off or different from how the person normally communicates. They typically avoid phone calls and provide excuses about why they cannot speak directly. Another warning sign is when the request involves sending money to an unfamiliar bank account or to a third party rather than directly to the person making the request. The scammers also tend to apply pressure by emphasizing urgency and requesting that the matter be kept confidential.
Protecting Yourself from This Threat
There are several important steps UK residents can take to protect themselves from falling victim to this cybersecurity threat. First and foremost, enable two-factor authentication on your WhatsApp account, which adds an extra layer of security beyond just your password. This feature requires a six-digit PIN that must be entered periodically and when registering your phone number with WhatsApp again. Never click on suspicious links sent through WhatsApp or other messaging platforms, as these may be phishing attempts designed to steal your login credentials or install malware on your device. Keep your phone’s operating system and all apps updated with the latest security patches, as these updates often fix vulnerabilities that criminals exploit.
What to Do If You Suspect a Scam
If you receive a suspicious message requesting money from someone you know, do not respond immediately or send any funds. Instead, contact the person through a different method such as a phone call to their known number, a text message to their regular mobile number, or through a different social media platform. If you cannot reach them directly, consider contacting a mutual friend or family member to verify the situation. If you have already sent money to a scammer, contact your bank immediately to report the fraud and see if the transaction can be stopped or reversed. You should also report the incident to Action Fraud, the UK national reporting centre for fraud and cybercrime, by calling 0300 123 2040 or visiting their website. Additionally, inform WhatsApp about the compromised account through their support channels so they can take action to secure it and prevent further abuse.