WhatsApp Voting Scam Alert: How Clicking a Link Can Hijack Your Account

How the WhatsApp Voting Scam Works

You receive messages from contacts appearing to be family members, friends, or colleagues asking you to vote in a dance competition, photo contest, or Spotify poll. These messages often include a compelling story—such as a scholarship opportunity for a child of close friends—to encourage participation.

How to Recognize the Scam

This fraud method is called "ghost pairing" and has these distinctive features:

• The sender appears to be someone you know
• You're asked to click a link to a voting site
• After clicking, the site requests your phone number or login credentials
• You're then asked to enter a code or scan a QR code related to WhatsApp's "linked devices" feature

In reality, you're not participating in any vote. Instead, fraudsters are pairing their device with your WhatsApp account, giving them full access.

What Happens After Account Hijacking

Once your account is compromised, fraudsters use it to:

• Send the same phishing messages to all your contacts
• Request money by impersonating you in emergencies (medical bills, fundraising campaigns)
• According to police reports, thousands of euros have been transferred to scammers through this method

Critically, the theft often goes unnoticed because your account appears normal to you.

Prevention and Security Measures

Be Suspicious of Links and QR Codes

• Exercise caution when receiving voting or contest participation requests via messaging apps
• Never scan QR codes whose purpose is unclear

Watch for Re-login Requests

• If a link prompts you to re-enter login information or input codes, treat it as suspicious

Verify Directly

• If uncertain, contact the apparent sender through another method (phone call) to confirm they sent the message

Regularly Check Linked Devices

• Access WhatsApp settings to review which devices are connected to your account
• Immediately remove any unfamiliar devices

Enable Two-Step Verification

• Activate WhatsApp's "two-step verification" feature to significantly reduce the risk of account takeover