WhatsApp Account Hijacking Scam Surges: Fake Friends Request Emergency Money

A surge of WhatsApp account hijacking scams is targeting users in Italy, with hackers exploiting security vulnerabilities to steal accounts and impersonate friends and family members. Victims receive urgent money requests via compromised accounts and may be tricked into bank transfers or visiting fraudulent websites. Regular security updates and verification procedures are recommended to prevent falling victim.

How the Scam Works

This scam begins with account hijacking exploiting security vulnerabilities. Hackers use a technique called "zero-click" attacks, which penetrate outdated versions of iOS and WhatsApp through flaws that require no action from the user. Once an account is compromised, criminals send urgent money requests to all contacts, asking for bank transfers, mobile phone credits, or other immediate payment methods.

Many messages include links to fraudulent websites designed to steal personal data, login credentials, and verification codes. These stolen credentials are then used to compromise additional accounts and perpetuate the scam chain.

Warning Signs

Sudden money requests from known contacts
Unusual tone or phrasing in messages compared to normal communication
Vague reasons with heavy emphasis on urgency
Pressure to send money before verification
Suspicious links included in messages
Multiple contacts sending similar requests (sign of widespread account compromise)

Prevention Tips

Always Verify Before Paying When you receive a money request, contact the person using another phone number or meet in person before making any transfer. A legitimate request will withstand this verification.

Manage Links and Authentication Never click suspicious links. Never share verification codes, PINs, or passwords with anyone, regardless of who claims to need them.

Keep Devices Secure

Update your operating system and WhatsApp to the latest versions
Enable two-factor authentication in WhatsApp settings
Restrict automatic attachment downloads
Regularly check WhatsApp's "Linked Devices" section and log out unrecognized sessions

If Your Account Has Been Compromised

Immediately notify all contacts to prevent the scammer from soliciting money in your name
Begin account recovery using WhatsApp's official procedures
Change passwords for all related online accounts

Apple has already released updates to address system vulnerabilities.

How to Report

The Italian State Police (Polizia di Stato) encourages citizens to report suspected scams through their online portal at www.commissariatodips.it.