If you use WhatsApp on your computer, you have to be extra careful about what you click on. A new WhatsApp scam has emerged, and it could trick you into giving away your account and personal information to cybercriminals. The new scam targets unsuspecting users who want to use the WhatsApp Web version to access their WhatsApp accounts. And the worst part is that you might not even realize you’ve been scammed until it’s too late.
According to reports, this new WhatsApp scam has so far affected 237 users in Singapore, exposing them to identity theft and losses amounting to $606,000. The scammers use social engineering techniques to trick users into sending them money.
But how does this WhatsApp scam work, and more importantly, how can you avoid it? In this article, you’ll learn how this scam works, how to spot it, and how to protect yourself and your loved ones from falling victim to it.
How Does the New WhatsApp Scam Work?
The new WhatsApp scam combines two different scams: website cloning and social engineering.
First, scammers create a fake WhatsApp Web page that is identical to the official one, with the same logo, design, and instructions, but with a slightly different domain name. For example, instead of the official WhatsApp Web domain name which is “web.whatsapp.com,” the fake site may have “web-whatsapp.com” or “whatsapp-web.com” in the URL.
Through Google Search Advertising, the scammers can make their fake site rank high on Google search results. So, if you want to use WhatsApp Web on your computer and don’t know the exact URL of the official website, you will most likely Google something like “WhatsApp Web” or “WhatsApp login.” You might click the first result that pops up, which could lead you to the fake WhatsApp website.
Once you land on their fake web page, you’ll see a QR code. The website asks you to scan the QR code with your phone to log in, just like the real WhatsApp Web does. However, this QR code is not legitimate. As soon as you scan it, the scammers will gain access to your WhatsApp account, including all your contacts, chat history, photos, and videos. They can also send and receive messages on your behalf without your knowledge.
Once they have full access to your WhatsApp account, the scammers employ their social engineering technique to trick your contacts. In this case, they contact your friends and family, pretending to be you. For example, they may pretend to need urgent financial help due to an emergency, such as a medical bill or a legal issue. If your contact trusts you, they might not suspect anything wrong and fall for these requests, ending up losing their money. By the time you realize that your WhatsApp account has been hacked, it may be too late to stop the damage.
How to Identify and Avoid the New WhatsApp Scam
The new WhatsApp scam is a sophisticated and dangerous online threat that can cause a lot of harm to you and your loved ones. However, it’s not impossible to spot and avoid it. The best way to avoid this scam is to be careful about the websites you visit and the QR codes you scan. Here are some tips to keep in mind:
- Always verify the URL of the website you are visiting. The official WhatsApp Web URL is https://web.whatsapp.com. If you encounter any variations like https://web-whatsapp.com or https://whatsappweb.com, refrain from clicking or scanning the QR code. It is a fake site that could compromise your WhatsApp account.
- Don’t trust Google search results blindly. Just because a site appears as the first result doesn’t mean it’s legitimate.
- Use alternative methods to access WhatsApp Web securely. Instead of searching for “WhatsApp Web” on Google, you can bookmark the official web page or type the URL directly into the address bar. Alternatively, you can install the official WhatsApp desktop app on your computer.
- Be careful if you receive any message from someone you know asking for money, especially if it sounds urgent. Don’t reply right away. Verify the identity of the sender before you respond or take any action. Call them or contact them through another channel to confirm their identity and the validity of their request.
- Don’t fall for pressure or urgency. Scammers often use pressure or urgency to make you act quickly and without thinking. Don’t let them rush you. Take your time and do your research before making any decision.
- Check your linked devices regularly. To do so, open WhatsApp and tap on the three dots at the top-right corner, then go to “Linked Devices” to review all devices linked to your account. If you see any device you don’t recognize, tap on it and select “Log Out.”
Conclusion
The new WhatsApp scam is a serious online threat that can affect anyone who uses WhatsApp. To avoid it and protect yourself and your loved ones from falling victim, you need to be aware of how it works. Remember to always check the URL of the WhatsApp Web when you visit, use a bookmark or a shortcut to access it, and verify any requests for money from your contacts.
