Beware of 'Vote for My Friend's Daughter' Scam Spreading on WhatsApp

How the Scam Works

This scam begins with a WhatsApp message that appears to come from a trusted contact:

"Hey, I need a favor! Sophie (or Eliska), my friend's daughter, is in a dance contest. Can you vote for her to support her?"

Because the message appears to come from someone already in your contacts, many users trust it and take action without hesitation.

The Scam Process

Clicking the link in the message directs users to what appears to be a legitimate online voting website. The scam then proceeds through the following steps:

1. Phone Number Entry - The website prompts users to enter their phone number
2. WhatsApp Authentication Request - Immediately after, users receive a notification from WhatsApp asking whether to allow a new device to connect to their account
3. Account Takeover - Once the user grants permission, the scammer can access the account through a web browser session. This is known as "ghost pairing" or "phantom pairing"

Risks When Your Account Is Compromised

Once scammers access your account, they can:

• Access Your Contacts - View your entire contact list
• Spread the Same Scam Message - Send the same voting message to other users in your network
• Commit Financial Fraud - Send messages to your contacts impersonating you, such as "I need urgent money for medical bills," to steal money
• Delete Messages - Erase sent messages to avoid detection by the legitimate account owner

Warning Signs and Prevention

What to Do If You Receive Such a Message

• Never click on voting website links in messages
• Do not enter your phone number on the website, even if you click the link by mistake
• Be suspicious of any message about voting for dance contests—this is a common scam technique
• If you receive such a message from a friend, contact them directly through another method to verify they actually sent it

Protecting Your Account

1. Enable Two-Factor Authentication (2FA) - In WhatsApp settings, activate two-factor authentication. This adds an extra security step for login attempts from new devices
2. Check Active Sessions - In the WhatsApp app, review the "Linked Devices" or "Web & Desktop" section to ensure no unfamiliar browser sessions are connected. Delete any suspicious sessions immediately
3. Regular Monitoring - Make it a habit to periodically check for unauthorized account access

Reporting and Support

• If You Receive a Scam Message - Use WhatsApp's in-app reporting feature to report the message
• If You Already Entered Information - Contact cybersecurity authorities or platforms like Cybermalveillance (France) for assistance
• If You've Been Financially Defrauded - File a report with local law enforcement

Additional Information

While this scam technique is not new—security firm Kaspersky documented it in September 2025—it has spread rapidly across France, Spain, and Belgium since mid-October 2025. Extra caution is advised.