Fraudsters have found a loophole on WhatsApp (Picture: Jonathan Raa/NurPhoto/Shutterstock)
Criminals have found a way to exploit a popular feature on WhatsApp – the group messaging function.
Cyber criminals are always on the prowl for new ways to get hold of personal information, and now now they have got their eyes set on WhatsApp which boasts 2,000,000,000 monthly users.
WhatsApp users have been warned by fraud experts to look out for strange group messages.
It comes after Action Fraud, a national cyber crime centre with the City of London Police, revealed it had received more than 630 reports this year alone of fraudsters pretending to be a group members in a chat.
How fraudsters use WhatsApp for cash scams
Cyber criminals target big group chats in particular (Picture: Firdous Nazir/Eyepix Group/Shutterstock)
First, a member of a group will get a WhatsApp audio call from a scammer posing as a member of the group, Action Fraud said.
To disguise and gain trust, they might have a false profile picture or name to appear more legitimate.
If you are told to you will get a one-time passcode to join a group video call, this should be a major red flag.
Because next, the criminal will ask for the victim’s passcode to be registered for the call.
However, the code the criminal wants will allow them to register the victim’s WhatsApp account to a new device, enabling the criminal to take over the account.
They will then enable two-step verification to remove victim’s access before targeting their loved ones.
The criminals have messaged other members of the group or friends and family asking for an urgent money transfer.
How to avoid the WhatsApp scam
There are ways to avoid being a victim of the cyber fraud.
Here are top tips for staying safe.
Two-step verification on WhatsApp
The most efficient way to stop criminals accessing your WhatsApp is to set up two-step verification. This can be done by opening WhatsApp, tapping Settings, Account, Two-step verification, Enable.
Call the person if they send a strange request
Picking up the phone and calling a family member or friend if they made an unusual request could save a lot of money and hassle.
Report spam messages or block
You can do this by pressing and holding on the message bubble, then select Report and follow instructions.
Reports of fraud or cyber crime in England, Wales and Northern Ireland can be done at http://www.actionfraud.police.uk or by calling 0300 123 2040, and in Scotland to Police Scotland on 101.
In particular, those in big group chats should be ‘on their guard and monitor who joins chats,’ DSI Gary Miles, head of the National Fraud Intelligence Bureau at the City of London Police, said.
Action Fraud said its data suggests that the the three most affected group chat types are Islamic religious groups, Christian religious groups and work chats.
A WhatsApp spokesperson said: ‘All personal messages sent on WhatsApp are protected by end-to-end encryption, but we can all play a role in keeping our accounts safe.
‘We recommend that all users set up two-step verification for added security and advise people never to share their six-digit PIN code with others, not even with friends or family.
‘If you receive a suspicious message (even if you think you know who it’s from), calling or requesting a voice-note is the fastest and simplest way to check that someone is who they say they are.’
Get in touch with our news team by emailing us at webnews@metro.co.uk.
For more stories like this, check our news page.