How Scammers Hijack Your WhatsApp Account and How to Safeguard Yourself

Indian crypto exchange WazirX recently disclosed that cybersecurity firm Mandiant, a Google subsidiary, confirmed that the laptops used by their team were not compromised during the $230 million cyberattack. The focus now shifts to Liminal’s wallet infrastructure, with findings shared with law enforcement and other agencies to assist in asset recovery.

As WhatsApp remains a vital tool for global communication, it also attracts cybercriminals. With over 2.78 billion active users across 180 countries and 140 billion messages exchanged daily, the app’s popularity makes it a prime target for hacks and scams.

To safeguard your WhatsApp account, it’s crucial to understand common hacking tactics:

1. **Social Engineering**
**How It Works:** Hackers manipulate users into sharing verification codes. They may register your number on their device, prompting a verification code to be sent to your phone, which they then attempt to trick you into revealing.
**Protection Tip:** Never share your WhatsApp verification code, even if asked by someone you know. If you receive a request for the code from a contact, verify its legitimacy before responding.

2. **Call Forwarding Scams**
**How It Works:** Scammers trick you into dialing a number with an MMI code, which forwards your calls to their number. They can then register your number on WhatsApp and request a verification code.
**Protection Tip:** Avoid responding to unsolicited messages or calls, and be cautious of unknown numbers.

3. **WhatsApp Web Hacking**
**How It Works:** Hackers create a fake QR code to intercept your login credentials when you scan it for WhatsApp Web.
**Protection Tip:** Verify QR codes before scanning. Use tools like Bitdefender Scamio to ensure QR codes are authentic.

4. **Spyware**
**How It Works:** Spyware installed on your phone through malicious links or attachments can monitor and send your WhatsApp messages to hackers.
**Protection Tip:** Use robust mobile security software to detect and block threats. Regularly review app permissions and remove any suspicious apps.

5. **Dark Web Attacks**
**How It Works:** Hackers obtain personal information from the Dark Web and use it to access your WhatsApp account.
**Protection Tip:** Regularly check if your personal data is exposed online and use digital identity protection tools to monitor and respond to potential threats.

**Real-Life Example:** Faustin received a suspicious call from an unfamiliar number. After searching online, he found it was from Sweden. Following further calls that went unanswered and discovering missing files on his phone, he realized he had been hacked.

**Signs Your WhatsApp May Be Compromised:**

1. **Unrecognized Devices:** Check for unfamiliar devices logged into your account by going to WhatsApp, selecting the three dots in the top right corner, and choosing “Linked Devices.” Log out of any suspicious entries.

2. **Suspicious Activity:** Be wary of unsolicited verification codes, unusual messages, or alerts from contacts about messages you didn’t send. Watch for unusual noises during calls and calls from unknown numbers.

3. **Phone Performance Issues:** If your phone is slower, crashes, or the battery drains quickly, it could indicate hidden applications running. Review background app activity in Settings under “Background App Refresh” and disable any suspicious apps.

By staying vigilant and adopting these protective measures, you can better secure your WhatsApp account against potential threats.