"Ghost Pairing": Police Warn of New WhatsApp Fraud Scheme

How the Scam Works

"Ghost Pairing" exploits trust relationships through WhatsApp. Criminals either compromise accounts belonging to friends and family or send messages from illegally accessed accounts with requests like: "Hi, could you please vote for Eliska? She's the daughter of my friends, and winning a free dance course is very important to her."

When recipients click the link, they're directed to a fraudulent website that mimics a legitimate voting page. Users are prompted to enter their phone number or login credentials, then asked to enter a code through WhatsApp's "Linked Devices" feature or scan a QR code.

Once this step is completed, the victim unknowingly links their WhatsApp account to the attacker's device—a process security experts call "Ghost Pairing."

The Danger

Once linked, criminals gain full access to:

• All chats and contacts
• Message viewing, reading, and deletion capabilities
• Ability to impersonate the victim and message their contacts
• Access to request money from the victim's network

The scam is particularly insidious because WhatsApp continues functioning normally on the victim's phone. This invisibility makes detection extremely difficult, allowing criminals to exploit the compromised account while the victim remains unaware.

Reported Impact

According to police reports, thousands of euros have been transferred to scammers through this scheme. After gaining account access, criminals contact the victim's contacts with additional fake voting schemes or fabricated emergencies—claiming funds are urgently needed for medical operations or charitable donations.

Warning Signs

Be suspicious if:

• Unknown contacts request voting participation through messenger apps
• Clicking a link triggers unexpected login screens or code entry requests
• Acquaintances suddenly request money or code confirmations via message
• You receive messages inconsistent with someone's typical communication style

Protection Measures

Prevention:

1. Never click unfamiliar links or scan questionable QR codes from unverified sources
2. Never confirm or enter device linking codes you didn't initiate
3. If a contact requests money or code confirmation, independently verify through another communication method (phone call)
4. Regularly check WhatsApp settings under "Linked Devices" to monitor which devices have access; remove any unrecognized devices immediately
5. Enable "Two-Step Verification" in WhatsApp settings for added security. This significantly increases the difficulty for attackers to access your account
6. Be cautious when receiving messages requesting participation in voting or contests

If You Suspect Compromise:

1. Check WhatsApp settings under "Linked Devices" for unfamiliar devices
2. Immediately remove any unrecognized devices
3. Contact friends and family through alternative communication channels to warn them that your account may have been compromised and they may receive fraudulent messages
4. File a report with local police

Reporting

If you suspect you're a victim or have received suspicious messages, contact your local police department immediately.