Experts issue warning to WhatsApp users after fraudsters find way to exploit a popular feature

Scammers are always on the move, finding new, sneakier ways to scam people.

This means to keep ourselves safe and our data secure, we have to be more vigilant than ever.

Now, WhatsApp users are being warned against a new scam targeting group chats.

According to Action Fraud, the national cybercrime centre with the City of London Police, they’ve received over 630 reports this year alone of fraudsters posing as members of WhatsApp groups.

The centre has issued the warning on X (formerly Twitter) to spread awareness to the 2 billion monthly users of the Meta-owned app.

First, a group chat member will receive a WhatsApp audio call from a scammer posing as another member of the group, Action Fraud said.

To seem more credible, the scammer might use a fake profile picture or name.

During the call, the scammer may ask the victim to join a group video call by sending a one-time passcode. This should be a huge red flag.

From here, the scammer will ask them for the passcode to be registered for the call. But, in fact, the passcode allows the scammer to register the victim’s WhatsApp account on a new device, giving them full control over the account.

Once they have control, they can enable two-step verification to lock the victim out and pose as them for their criminal activities.

It's been known for these criminals to message other members of the group or friends and family asking for money.

DSI Gary Miles, head of the National Fraud Intelligence Bureau at the City of London Police, advises people in large group chats in particular to be ‘on their guard and monitor who joins chats.’

Action Fraud reports that Islamic and Christian religious groups, as well as work-related chats, are the three most commonly targeted.

A WhatsApp spokesperson said: ‘All personal messages sent on WhatsApp are protected by end-to-end encryption, but we can all play a role in keeping our accounts safe.'

They recommended all users to activate two-step verification on the app. This can be done by opening WhatsApp, tapping Settings > Account > Two-step verification > Enable.

Also, they stress 'never to share their six-digit PIN code with others, not even with friends or family.

‘If you receive a suspicious message (even if you think you know who it’s from), calling or requesting a voice-note is the fastest and simplest way to check that someone is who they say they are.’