In short
Most common fake: Messages from a new number pretending to be a friend or family member who needs money.
Safest check: If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know.
Where to report it: Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them.
What WhatsApp says
WhatsApp says the app is free and you never have to pay to use it, and warns against sharing card or bank details, your birth date or passwords in chats. It advises setting a two-step verification PIN and never sharing it with anyone. Source: WhatsApp
Common fake WhatsApp messages
These are the 5 shapes a fake WhatsApp message usually takes. They are listed in the order we see them most often, and none of them is something WhatsApp itself does.
- Messages from a new number pretending to be a friend or family member who needs money
- Job offers promising high pay for simple work from home
- Investment offers promising low risk and high returns
- Messages asking you to tap a link, activate a new feature or download an app
- Claims that you must pay to keep using WhatsApp
WhatsApp's real web addresses
Genuine WhatsApp links and emails use these domains. Look at the part just before the first single slash: whatsapp.com is real, but whatsapp-support-center.com or whatsapp.com.account-check.top are not.
- whatsapp.com
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a WhatsApp message safely
- If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know
- Make a voice or video call to confirm who you are talking to
- Do not tap links, share details or forward messages from contacts you are unsure about
How to report a fake WhatsApp message
- Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them. Official details on whatsapp.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it at whatsapp.com, typed into your browser yourself, and turn on two-step verification. Do not use any link from the message.
- Expect follow-up calls or messages pretending to help, sometimes claiming to be from WhatsApp security. Never share one-time codes and never move money to a "safe account".
- Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them, then delete the message.
More help: The “Hi Mum, this is my new number” scam and what to do after a scam.
How to protect yourself next time
Take your details off data broker sites
Scammers buy phone numbers, home addresses and family details from people-search and data broker sites. The less of that is public, the fewer and less convincing the scam messages you get.
Free: You can ask each site to delete your details yourself. In the EU and the UK, data protection law gives you that right.
- Incogni Partner link Sends removal requests to data brokers for you, and keeps sending them.
Turn on two-step verification, ideally with a security key
With two-step verification, a stolen password isn't enough on its own. A hardware security key goes further: it simply doesn't work on a fake site, so it can't be phished.
Free: Two-step verification is free. Switch it on in the security settings of your email, bank, WhatsApp and social media accounts today.
- YubiKey (Yubico) Partner link A small USB or NFC key you tap when you log in. It will not work on a fake site.
Compare the tools that help, and what each costs
Links marked Partner link may earn us a commission, at no cost to you. It never changes our advice, and the free option always comes first. Affiliate disclosure.
Questions people ask
Does WhatsApp send messages asking for payment or personal details?
WhatsApp says the app is free and you never have to pay to use it, and warns against sharing card or bank details, your birth date or passwords in chats. It advises setting a two-step verification PIN and never sharing it with anyone.
How can I check if a WhatsApp message is real?
If a contact claims to be someone you know, call them on the number you already have or ask a question only they would know. Make a voice or video call to confirm who you are talking to. Do not tap links, share details or forward messages from contacts you are unsure about.
How do I report a fake WhatsApp message?
Report the message or contact inside WhatsApp, then block the sender and delete the message. WhatsApp does not tell the sender you reported them.
I clicked a link in a fake WhatsApp message but did not enter anything. Am I at risk?
Opening a link is far less serious than filling one in. Close it, and if you need your account, reach it by typing whatsapp.com yourself. Clicking does tell the sender your number is live, so expect more messages for a while: report the message or contact inside whatsapp, then block the sender and delete the message. whatsapp does not tell the sender you reported them.
Have you had this one?
Tell other people what the message said and how it reached you. It helps someone recognise it before they tap.
No stories yet. Yours could be the one that warns someone.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.
- About suspicious messages and scams (WhatsApp)
- WhatsApp Security (WhatsApp)
- New WhatsApp Tools and Tips to Beat Messaging Scams (Meta)