New WhatsApp Account Hijacking Scam Alert: Criminals Request Money from Your Contacts

Overview of the Scam

Spanish National Police have issued a warning about a new type of WhatsApp fraud. Unlike traditional account takeovers, this scam allows criminals to temporarily control the account while the victim retains full access and remains unaware of the unauthorized activity.

How the Scam Works

The criminals manage to hijack the account without obtaining:

• Verification codes
• Passwords
• Personal information
• Authorization for third-party access

Once they control the account, scammers send money requests to the victim's contacts. Remarkably, these messages do not appear in the victim's own chat history, so the real account owner only discovers the fraud when friends or family ask about the money they supposedly requested.

Common Deceptive Pretexts

Scammers exploit trust by claiming urgent circumstances such as:

• Hitting their banking card limit and needing cash immediately
• Reaching their Bizum transfer limit and asking the recipient to send money instead
• Emergency payment needs

They then request Bizum transfers or bank transfers to different phone numbers or accounts, promising to repay the money later. The recipient believes they're helping a trusted person, but is actually sending funds directly to criminals.

Vulnerable Devices Identified

Police investigations revealed that many victims were using iPhones without the latest operating system version installed. These unpatched devices may have security vulnerabilities that criminals exploited.

Warning Signs and Prevention

Never assume a message is authentic just because it comes from a known contact's number

A message from someone's WhatsApp number does not guarantee that person sent it. Always verify by calling them directly.

Verify unexpected money requests with a phone call

• Before sending any money, contact the person directly by phone
• Confirm they actually made the request
• One phone call is often enough to prevent becoming a victim

Be suspicious of Bizum requests to unfamiliar numbers

• Watch for requests to send money to different phone numbers than the supposed sender's
• Legitimate requests should come from the person's own number

Keep your devices updated

• Maintain the latest iOS or Android version on your phone
• Update WhatsApp and other apps regularly
• Security updates fix vulnerabilities that criminals may exploit

Enable WhatsApp two-step verification

• Activate this feature in your app settings
• This adds an extra layer of security to your account

Immediate action if you've already sent money

• Contact your bank immediately
• Preserve all conversations and payment receipts
• Report the fraud to police without delay
• The bank may be able to recover funds if contacted quickly