WhatsApp Zero-Click Scam Targets Older Devices with Urgent Money Transfer Requests

A zero-click WhatsApp scam exploits vulnerabilities in older devices to steal personal data and deceive victims' relatives into sending money. Hackers infiltrate accounts and impersonate users, sending urgent money transfer requests to family members. Spain has reported over 50 complaints, and authorities recommend keeping devices and apps updated.

How This Scam Works

This is a zero-click attack exploiting WhatsApp vulnerabilities. Victims don't need to click anything—hackers can infiltrate accounts directly.

Attack Method

Targets outdated devices: Old phones and tablets without recent security updates are vulnerable
Account takeover: Attackers exploit WhatsApp flaws to access victim accounts
Impersonation: Messages are sent to family and friends as if from the hacked user
Emotional manipulation: Requests mention urgencies like medical bills or legal troubles
Erasing evidence: Hackers use WhatsApp Web from another device to send messages, then delete them so the real owner doesn't notice, while recipients still see them

How to Spot the Scam

If you receive an urgent money transfer request from a contact, verify using a different communication method (call them directly)
Watch for unusual scenarios: passport loss, credit card theft, or other emergencies
Notice inconsistencies in tone, grammar, or writing style
Always confirm through a separate channel before transferring money

Prevention Tips

Update devices regularly: Install the latest OS updates for iOS and Android
Keep apps updated: Use the latest WhatsApp version with current security patches
Check linked devices: Review WhatsApp settings for linked devices and remove unknown connections
Remove suspicious access immediately: Delete unfamiliar devices from your linked devices list
Verify money requests: Always confirm money requests through another communication method

Where to Report

Report account security concerns to WhatsApp directly
Contact local police (emergency line) or consumer protection agencies
Alert banks and credit card companies if personal information was compromised