WhatsApp Web is the Latest Tool Used by Scammers to Lure Victims; Here's how to Stay Safe

Payment apps and messaging platforms have not just made life convenient by allowing people to connect with family and friends, but have also become essential for work. But as people are becoming increasingly dependent on such applications, fraudsters are also using them to orchestrate fraudulent schemes while evading detection. In Singapore alone, there has been a significant increase in such cases with approximately 237 Singaporeans falling victim to a recent phishing scam, resulting in a collective loss of $606,000. The Singapore Police Force has issued a cautionary alert specifically targeting WhatsApp web users. They have urged users to remain vigilant and exercise caution when using the application.

Breaking down the Whatsapp Web scam

WhatsApp Web allows users to access the messaging app conveniently while working on their desktop computers or laptops, without having to check their phones repeatedly. In this particular case, users were deceived into clicking on fraudulent links while attempting to access the official WhatsApp Web page, thereby allowing the scammers to gain control over compromised WhatsApp accounts. Once access was obtained, the perpetrators posed as the account owners and requested funds from family members and friends under the pretense of an emergency.

The scammers requested online transfers, citing supposed technical glitches with their bank accounts to appear more convincing. In a bid to gain trust, they even shared screenshots of payment transactions, presumably to exploit them later. Given their infiltration of the user's phone and access to contacts, they were able to deceive recipients of these messages into believing that the requests originated from genuine account holders.

Here’s how to stay safe

To mitigate such occurrences, law enforcement advised the public to adopt the following security precautions:

1. Verify Identity: Always verify the identity of the sender before responding to any messages, especially if they request personal information or financial assistance.

2. Enable Two-Step Verification: Activate WhatsApp's two-step verification feature to add an extra layer of security to your account. This feature requires a PIN whenever you register your phone number with WhatsApp, making it more difficult for scammers to gain unauthorized access.

3. Use Official Sources: Ensure that you are using the official WhatsApp application downloaded from legitimate sources such as Google Play Store or Apple App Store. Avoid using modified or third-party versions of the app, as they may be vulnerable to security breaches.

4. Exercise Caution with Links: Be cautious of clicking on links sent through WhatsApp, especially from unknown or suspicious contacts. Scammers often use phishing techniques to trick users into clicking on malicious links that can compromise their personal information or install malware on their devices.

5. Ignore Unsolicited Messages: Do not respond to unsolicited messages, especially those requesting personal information, financial transactions, or account verification codes. Legitimate organizations will not ask for sensitive information via WhatsApp.

In addition to these measures, local police have cautioned individuals against sharing WhatsApp account verification codes, encouraged them to routinely monitor linked devices on WhatsApp, and advised them to stay informed about potential scams by visiting www.scamalert.sg or reaching out to the Anti-Scam Helpline at 1800-7226688.