Scammers Impersonate ChatGPT on WhatsApp; Hong Kong Police Report Over 150 Account Hijacking Cases

How It Works

Scammers are sending unsolicited WhatsApp messages claiming to be ChatGPT, OpenAI, customer service representatives, or other authorities. These impersonations are fraudulent.

According to OpenAI's investigation, the fraudsters likely operate from criminal networks in Cambodia. They abuse AI technology to:

• Generate natural conversations: Create authentic-sounding messages in mixed Chinese and English
• Impersonate voices: Use AI to mimic family members' or friends' voices in recorded messages
• Enable multilingual fraud: Target victims across different languages
• Support various scams: Investment fraud, romance scams, and identity theft

Warning Signs and How to Identify Fraudulent Messages

What OpenAI and ChatGPT will NEVER do:

• Contact you via unknown WhatsApp numbers without warning
• Send personal messages from individual phone numbers
• Request contact outside official channels (website, official app, or OpenAI-endorsed platforms)

Red flags in suspicious messages:

• Unsolicited contact claiming to be "AI," "customer service," "government official," or "delivery company"
• Requests for:
  • WhatsApp verification codes (6-digit OTP) or one-time passwords
  • Bank account details, credit card information, or online banking credentials
  • National ID numbers, addresses, passport data, or selfies for verification
  • Downloads of unknown links, APK files, or configuration profiles
  • Participation in investment plans, task completion schemes, gig work, or "AI earning" programs
  • Emergency fund transfers, prepaid card purchases, or payment collection

Prevention Tips

1. Never share personal information with strangers Do not disclose your name, workplace, address, birthdate, banking details, or family information—even as a "joke." Scammers use this data to craft convincing phishing tactics.

2. Never provide WhatsApp verification codes Never read aloud, forward, or screenshot your 6-digit WhatsApp code. This is critical authentication information that criminals use to hijack accounts.

3. Always verify requests for money directly If you receive a message from a "friend" requesting funds, purchase assistance, gift cards, or transfers—even with voice messages attached—call them directly to confirm. Do not simply ask "Is this you?" in the same chat; the account itself may be compromised.

4. Enable WhatsApp Two-Step Verification Go to Settings → Account → Two-Step Verification and set a 6-digit PIN code linked to your email address. This provides an extra layer of protection even if a scammer obtains your SMS verification code.

5. Regularly check linked devices Navigate to Settings → Linked Devices to see if any unfamiliar computers, browsers, or devices are connected. If you find unauthorized access, log out immediately and change your account password.

What to Do If You Suspect a Scam

• If you haven't shared information: Block and report the account immediately
• If you've already provided information, clicked links, shared codes, or sent money: Contact your bank, police, and WhatsApp support without delay
• Hong Kong Police Cybercrime Prevention Hotline: 18222

Key Takeaway

While AI is a useful tool, criminals exploit it to make fraud more convincing. Always remain skeptical of unsolicited messages from accounts claiming to be AI or customer service. Never provide personal information or money to unverified sources.