WhatsApp users in South Africa are being warned about scammers taking over accounts and using them to trick friends, family members and colleagues into sending money.
Cybercriminals are using several methods to gain access to accounts, including SIM-swapping scams, fraudulent verification requests and malicious links.
Cybersecurity expert Boikokobetso Makhetlane explained that criminals can take control of a victim’s SIM card without their knowledge, a technique commonly known as SIM swapping.
How WhatsApp account takeovers happen
Makhetlane said scammers may send victims verification codes or call them while pretending to be representatives of a service provider.
They may claim there is suspicious activity involving the victim’s phone or SIM card and ask for additional information to verify their identity.
Once criminals gain access to an account, they can impersonate its owner and contact people in their address book to request money.
Friends, family members and work colleagues may believe the messages are genuine because they appear to come from someone they know.
Makhetlane also warned that sensitive information shared through WhatsApp could be exposed if an account is compromised.
This could include banking and credit card details, passwords, and residential addresses belonging to users or their contacts.
Warning signs to watch out for
One possible indication of a SIM-swap attack is a sudden loss of mobile network connectivity.
Another warning sign is a WhatsApp notification stating that the user’s phone number has been registered on another device.
Makhetlane urged users who notice these signs to contact their mobile network provider immediately to establish whether their SIM card or account has been compromised.
“If you do see that, immediately contact your network service provider as soon as possible to verify that everything is still intact because you need to double-check everything,” he said.
Users should also be cautious of unexpected links sent through messages, even when they appear to come from people they know.
Makhetlane noted that scammers increasingly use links as a way to gain access to WhatsApp accounts.
How to protect your WhatsApp account
WhatsApp users can take several steps to reduce the risk of their accounts being compromised.
These include:
- Enable two-step verification: Add an extra layer of protection to your WhatsApp account by setting up a PIN.
- Never share verification codes: Do not give one-time passwords or WhatsApp registration codes to anyone, even if they claim to represent a service provider.
- Check linked devices: Regularly review the devices connected to your account and log out of any you do not recognise.
- Be cautious of suspicious links: Avoid opening unexpected links, particularly those accompanied by urgent requests or unusual messages.
- Verify requests for money: If a friend or relative asks for money through WhatsApp, contact them directly through another channel before making a payment.
- Contact your mobile network provider: If your phone suddenly loses network connectivity without explanation, check whether your SIM card has been compromised.
As scammers continue to exploit trusted relationships and personal information, users are being urged to strengthen their account security and remain alert to unusual activity.
A message that appears to come from a friend or family member may not be genuine, and verifying a request before sending money could prevent a costly scam.
Have you fallen victim to a WhatsApp scam?
Let us know by clicking on the comments banner below …