WhatsApp scams: how to spot them and stay safe

Scammers copy WhatsApp because millions of people use it. Here's how to tell a fake WhatsApp message from a real one, and what to do if you already clicked.

In short

WhatsApp says the app is free and you never have to pay to use it, and warns against sharing card or bank details, your birth date or passwords in chats. It advises setting a two-step verification PIN and never sharing it with anyone.

Most common fake: Messages from a new number pretending to be a friend or family member who needs money.

Safest check: If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know.

Example · fake WhatsApp messageIllustrative, links disabled
Hi Mum, this is my new number, my phone broke. Can you pay this bill for me today? I will pay you back tomorrow: quick-bill-pay[.]link/inv
An example fake WhatsApp message with the warning signs highlighted.

What WhatsApp says

WhatsApp says the app is free and you never have to pay to use it, and warns against sharing card or bank details, your birth date or passwords in chats. It advises setting a two-step verification PIN and never sharing it with anyone. Source: WhatsApp

Common fake WhatsApp messages

  • Messages from a new number pretending to be a friend or family member who needs money
  • Job offers promising high pay for simple work from home
  • Investment offers promising low risk and high returns
  • Messages asking you to tap a link, activate a new feature or download an app
  • Claims that you must pay to keep using WhatsApp

WhatsApp's real web addresses

Genuine WhatsApp links and emails use these domains. Look at the part just before the first single slash: whatsapp.com is real, but whatsapp-support-center.com or whatsapp.com.account-check.top are not.

  • whatsapp.com

Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.

How to check a WhatsApp message safely

  1. If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know
  2. Make a voice or video call to confirm who you are talking to
  3. Do not tap links, share details or forward messages from contacts you are unsure about

How to report a fake WhatsApp message

  • Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them. Official details on whatsapp.com

Also report it to the official fraud service in your country. See the worldwide list.

If you clicked, paid or shared details

Act quickly. It makes a difference.

  1. If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
  2. If you entered a password, change it on the real WhatsApp website or app and turn on two-step verification.
  3. Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
  4. Report the scam, then delete the message.

More help: The “Hi Mum, this is my new number” scam and what to do after a scam.

Questions people ask

Does WhatsApp send messages asking for payment or personal details?

WhatsApp says the app is free and you never have to pay to use it, and warns against sharing card or bank details, your birth date or passwords in chats. It advises setting a two-step verification PIN and never sharing it with anyone.

How can I check if a WhatsApp message is real?

If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know. Make a voice or video call to confirm who you are talking to. Do not tap links, share details or forward messages from contacts you are unsure about.

How do I report a fake WhatsApp message?

Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them.

I clicked a link in a fake WhatsApp message. What should I do?

Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.

Official sources and further reading

We check our pages against official advice from the organisations themselves and from government agencies.