WhatsApp Account Takeover Scam: Fake Motorcycle Sales Used to Steal Money

A scam detected in Cuba uses fake motorcycle sales to hijack WhatsApp accounts and extort money from relatives in the United States. Scammers impersonate delivery workers, request registration codes, and trick family members into wire transfers via Zelle that cannot be easily reversed.

How This Scam Works

This fraud unfolds in carefully orchestrated stages.

Stage 1: Motorcycle Sales Advertisement Scammers post ads for electric motorcycles and offer delivery included. They claim payment can be made after the item arrives, which reduces the buyer's suspicion.

Stage 2: Requesting Verification Code On the scheduled delivery day, scammers call impersonating delivery personnel. They claim they cannot find the address and ask the buyer to send them a verification code for their GPS. In reality, they are requesting the 6-digit WhatsApp registration confirmation code sent to the victim's phone.

Stage 3: Account Takeover Once they obtain the code, scammers access the victim's WhatsApp account from another device and gain full control.

Stage 4: Money Extraction Using the compromised account, scammers contact family members (often in the United States) posing as the buyer. They claim the motorcycle has arrived and demand payment via Zelle, pressuring them with urgent language. Since Zelle transfers complete within minutes and cannot be reversed, scammers prefer this method. After payment, they disappear.

Warning Signs

Delivery personnel requesting WhatsApp codes: Legitimate delivery services never ask for WhatsApp registration codes.
Urgent, pressuring language: Demands to "send money now" are a classic fraud indicator.
Account anomalies: Family members report messages they know you didn't send, suggesting account compromise.

How to Protect Yourself

WhatsApp Security:

Never share your WhatsApp registration confirmation code with anyone, even people you know.
Enable two-step verification on your account to add an extra security layer against hijacking attempts.

Before Sending Money:

If asked to wire funds, verify the request through a separate communication channel (phone call) with the family member requesting it.
Confirm the identity of the money recipient before transferring any funds.
Be suspicious of any urgent demands for payment.

When Using Zelle:

Pause before responding to messages claiming urgency or emergency.
Contact your bank or credit union immediately if you believe you have been defrauded. Zelle may offer refunds for certain cases of identity theft and impersonation, depending on whether the transaction meets specific criteria.

Where to Report

Your bank or credit union: Report unauthorized transfers immediately.
Zelle: Submit a fraud claim for refund eligibility.
WhatsApp: Report the security incident.
Local law enforcement: File a fraud report with police.