WhatsApp is where many of us talk to family, coordinate with colleagues, buy from small businesses, and share photos. That everyday trust is exactly what scammers want to borrow. A message from a "daughter" with a new number, a "delivery update," or a friendly stranger can look completely ordinary until money or a password changes hands.

The good news is that WhatsApp scams follow predictable patterns. Once you recognize the script, most of them fall apart quickly. This guide walks through thirteen of the most common ones, how each works, and what to do instead.

It also covers the red flags that nearly all of these scams share, the WhatsApp settings that make you harder to target, and the role security tools can realistically play. You will find a recovery plan at the end in case something has already gone wrong.

Why Scammers Love WhatsApp

Before looking at specific scams, it helps to understand why this app attracts so much fraud. The reasons say a lot about how to defend yourself.

The first reason is reach. WhatsApp has a very large user base across many countries, and an account is tied to a phone number. If a scammer has your number, they can message you directly, and tools can generate thousands of numbers automatically.

The second reason is trust. People expect messages on WhatsApp to come from friends and family, so they let their guard down. The same message arriving by email might look suspicious, but on a chat app it feels personal.

The third reason is privacy. WhatsApp uses end-to-end encryption for personal chats, which protects your conversations from outsiders. That is good for users, but it also means the company cannot read message content, so scam messages are harder to filter automatically. Detection relies heavily on user reports and on behavior patterns.

The fourth reason is speed and informality. Chats are fast, short, and emotional, which suits scams that rely on urgency. Scammers push you to act before you have time to think or to call someone.

Finally, payments and links travel easily through chats. A link, a QR code, or a payment request can be sent in a single tap. This makes WhatsApp a convenient delivery channel for fraud of all kinds.

Scam 1: The Verification Code Scam

This is one of the most widespread WhatsApp scams, and it leads directly to account takeover. It starts with a message that seems harmless, often from a contact whose account has already been compromised. The message says something like, "I sent my code to your number by mistake, can you send it back?"

What is really happening is that the scammer has tried to register your WhatsApp account on their own device. WhatsApp sends a six-digit verification code to your phone by SMS or call. The scammer needs that code to finish the setup, so they trick you into reading it out.

If you share it, they take over your account and lock you out. They then message your contacts pretending to be you, which spreads the scam to the next victim. Sometimes the first message comes from a friend who has already been hacked, which makes it more convincing.

The rule is simple: never share a verification code with anyone, for any reason. WhatsApp itself will never ask you for it. If you receive a code you did not request, ignore it, and consider it a sign that someone is trying to access your account.

Turn on two-step verification, which adds a personal PIN that is required whenever your number is registered again. With it, a stolen code alone is not enough. Also use a unique email address for recovery, and make sure that email account is secure and has not appeared in a breach.

Scam 2: The "Hi Mum" or "Hi Dad" New-Number Scam

In this scam, a message arrives from an unknown number saying, "Hi Mum, I dropped my phone and this is my new number." The sender may use your real relationship terms, or may begin with a vague "Hi, it's me." The goal is to start a conversation as if you already know each other.

After a few friendly messages, the scammer introduces a problem. Their bank app is locked on the new phone, or an urgent bill is due, and they need you to pay it for them. They promise to repay as soon as the account is working again.

The scam works because it targets parents and grandparents, who naturally want to help. It exploits worry, and it moves quickly so that you do not stop to verify. Many victims send money within an hour.

Never act on a message from a "new number" without checking. Call your child or relative on their old number, or reach them through another family member. If you cannot reach them, ask a question only they would know the answer to.

It also helps to agree on a family code word that can be used in emergencies. This takes thirty seconds to set up and defeats nearly every impersonation attempt. Be careful about what a profile photo or a name proves, because both can be copied easily.

Scam 3: The Hijacked Friend Who Needs Money

This is a close relative of the previous scam, but the message comes from a real contact's real account. Someone you know sends a message saying they are stuck, short of cash, or need a quick favor. They ask you to send money, buy gift cards, or pay a bill on their behalf.

The sender is not your friend. Their account was taken over, often through the verification code scam described above, and the criminal is working through their contact list. Because the message appears in an existing chat with a familiar name and photo, it feels trustworthy.

Look for signs that something is off. The tone may be slightly different, the grammar may be odd, or the request may arrive at an unusual time. Scammers often avoid voice calls and insist on text, and they may become pushy if you ask questions.

Verify through a different channel. Phone the person directly using a number you already know, or ask a mutual friend. If they do not answer, do not send anything.

If you discover that a friend's account has been hijacked, let them know through another route. They will need to recover their account and warn their contacts. Quick action reduces the number of victims.

Scam 4: Fake Job and Task Scams

Few WhatsApp scams have grown as quickly as this one. A message arrives from a stranger offering easy online work, such as liking videos, rating products, or boosting app rankings. The pay sounds generous for a few minutes of effort, and there is no interview.

At first, the scammers may actually pay a small amount to build your confidence. You are then added to a group where other "workers" post screenshots of their earnings. Many of those members are fake accounts run by the scammers.

The trick comes next. You are told that to unlock higher-paying tasks, you need to deposit money, usually in cryptocurrency or through a bank transfer. The tasks get more expensive, you are told you cannot withdraw until you complete a set, and the amounts keep growing until you stop paying.

Genuine employers do not recruit by cold messages offering large pay for trivial work. They also do not ask you to pay to earn. If a job requires you to send money first, it is a scam.

Check any company independently. Search for its official website, find contact details yourself, and be cautious of recruiters who push you to move to another app. Report and block the sender, and warn friends who may receive the same offer.

Scam 5: Investment and Cryptocurrency Group Scams

In this scam, someone invites you to a WhatsApp group where members discuss stock tips, cryptocurrency trades, or "guaranteed" returns. A friendly "mentor" shares screenshots of profits and encourages you to try a small amount. Other group members cheer them on.

The profits are fake. The platform you are told to use is a fraudulent website or app that shows made-up gains. You may even be allowed to withdraw a small sum early on, which builds trust.

Once you invest larger amounts, withdrawals become blocked. You are told you must pay taxes, fees, or a "verification deposit" to release your money. The more you pay, the more is demanded, until the scammers disappear.

Warning signs include promises of guaranteed or unusually high returns, pressure to act fast, and a closed group where nobody questions anything. Real investment firms are regulated and do not recruit through random WhatsApp invitations. Check whether a broker is registered with your national financial regulator before sending any money.

Be skeptical of any "insider" tip. If a stranger has a secret way to make easy money, ask why they are sharing it with you. The honest answer is almost always that they are not.

Scam 6: Romance and Long-Con Friendship Scams

This scam begins with a friendly or flirtatious message from someone who seems to have contacted you by accident. They apologize for the wrong number, and the conversation continues. Over days or weeks, they share photos, daily updates, and affectionate messages.

The person is often an invented identity, using stolen pictures and a convincing backstory. They may claim to be a soldier overseas, an engineer working abroad, or a businessperson. They build an emotional bond before mentioning any money.

Eventually a crisis appears. They need funds for a medical emergency, a customs fee, or a flight to meet you. In some cases, they steer the conversation toward an "investment opportunity" that combines romance with the investment scam above.

Slow-moving scams are hard to spot because the emotions feel genuine. Be wary if someone avoids video calls, always has an excuse, and asks for money or gift cards. Try a reverse image search on their photos to see if they appear under other names.

A simple rule protects you: do not send money to someone you have never met in person. Talk to a trusted friend about the relationship, because outsiders often see the warning signs more clearly than you do. If you have already sent money, stop and seek help without feeling ashamed, since these scams are carefully designed.

Scam 7: Prize, Lottery, and Giveaway Scams

You receive a message saying you won a lottery, a car, a phone, or a cash prize. It claims to be from a well-known company, a bank, or even WhatsApp itself. All you have to do is click a link or reply with your details to claim it.

You cannot win a contest you never entered. The link usually leads to a fake form that harvests your personal information, or to a page that asks for a "processing fee" or "delivery charge." Some versions install malicious software on your device.

These messages often include official-looking logos, urgent deadlines, and exciting language. They may also be forwarded repeatedly, because scammers rely on victims to pass them along. A message forwarded many times is a signal to be more careful, not less.

If you are unsure whether a giveaway is real, go to the company's official website or app by typing the address yourself. Never use the link in the message. Genuine promotions do not ask you to pay to receive a prize.

Before clicking any unfamiliar link, paste it into a tool such as an AVO Link Checker, which compares addresses against lists of known harmful sites. It can miss brand-new scam pages, so use it as a second opinion, not a guarantee. If it looks suspicious, delete the message and block the sender.

Scam 8: Fake Delivery, Customs, and Shopping Scams

Fake delivery messages claim that a parcel could not be delivered, that a customs fee is due, or that your address needs confirmation. They usually include a link to a page that imitates a courier or postal service. The page asks for your details and a small payment.

The amount requested is often small, which makes people less cautious. But the real aim is to collect your card details and personal information. Once they have those, they can make larger charges or sell the data.

A related problem appears in online shopping. Fake sellers advertise goods at very low prices through WhatsApp, ask for advance payment, and then vanish. Others pose as buyers and claim they have "accidentally overpaid," asking you to refund the difference before the original payment fails.

If you are expecting a parcel, check the tracking number on the courier's own website or app. If you are not expecting anything, ignore the message. Real couriers do not demand payment through unknown links in chat messages.

When buying from a small seller, look for reviews, a physical address, and a payment method with buyer protection. Never pay by bank transfer to a stranger just because the price is attractive. If a deal feels too good, it usually is.

Scam 9: Fake Messages Pretending to Be WhatsApp

Scammers frequently pose as WhatsApp itself. Typical messages claim your account will be suspended, your subscription has expired, you must verify your identity, or you must pay to keep using the service. Some promise a special upgrade, such as a premium version or a new feature.

WhatsApp does not charge personal users a subscription fee to keep an account active, and it does not contact you through random chat messages to threaten suspension. Real notices from the company appear inside the app in a clear, official way. A message from an ordinary phone number that claims to be the company is a scam.

The links in these messages lead to fake login pages designed to capture your phone number, your verification code, or your payment details. They rely on panic. The message tells you that you have only a few hours to act.

Treat any such message as suspicious, no matter how professional it looks. Do not tap the link, and do not reply. Open WhatsApp directly and check your settings if you are worried.

A browsing protection feature such as AVO Web Shield can help by blocking known phishing pages if you click one by mistake. It cannot know about every new fake page, so the safest habit is not to open links from unexpected messages at all. Report the message in the app and block the sender.

Scam 10: Modified Apps and Fake Updates

Some people are tempted by versions of WhatsApp that promise extra features, such as hiding online status, using multiple accounts, or customizing themes. These unofficial copies go by many names, and they circulate through links, forums, and websites. They are not made by WhatsApp.

Using a modified app is risky for several reasons. It may contain malware that steals data or monitors your messages. It may also request excessive permissions, and the creators can access your account because you handed them the keys.

WhatsApp can also ban accounts that use unofficial clients. You could lose your account and chat history permanently. Even if the modified version works well at first, you have no way of knowing what happens behind the scenes.

Fake update messages are a related tactic. A message tells you that you must install a "new version" of WhatsApp to keep using it and provides a download link. Real updates come only through your device's official app store or the official site.

Download apps only from the official store for your device, and keep automatic updates turned on. If you have installed anything suspicious, remove it and run a security check. A scan tool such as AVO Smart Scan can look for unwanted apps and risky settings on your phone, which is useful if you are unsure what you installed.

Scam 11: Impersonating Banks, Officials, and Tech Support

Another category of scam involves people who pretend to be in authority. They may claim to be from your bank's fraud department, a tax office, a courier company, a telecom provider, or a police agency. They contact you through WhatsApp messages or calls and say there is a serious problem.

The problem might be suspicious activity on your account, an unpaid fine, a parcel containing illegal items, or a legal case in your name. In some versions, often called "digital arrest" scams, victims are kept on a video call and told they are under investigation. They are pressured to transfer money to a "safe account" to prove their innocence.

Real authorities do not behave this way. Banks do not ask you to move money to a safe account, and law enforcement does not arrest people over WhatsApp video calls or demand payments through chat. Any request for secrecy, such as "do not tell your family," is a major red flag.

Hang up and verify independently. Call the organization using the number printed on your card, bill, or official website, never the number given by the caller. Do not share one-time passwords, card numbers, or remote access to your device.

Fake tech support works in a similar way. A caller says your device is infected and asks you to install remote-control software. Giving access to your phone or computer allows them to see everything, including banking apps, so refuse and end the conversation.

Scam 12: QR Code Tricks

QR codes are used in two main WhatsApp scams. The first is a payment trick. A scammer sends a QR code and says, "Scan this to receive your money," often in the context of a sale or refund. In reality, scanning the code and entering your PIN sends money out of your account instead of into it.

The second is an account hijacking trick. WhatsApp lets you link additional devices, such as WhatsApp Web, by scanning a QR code. A scammer may convince you to scan a code they send, which links their device to your account and gives them access to your chats.

In both cases, the victim thinks they are doing something harmless. The scammer relies on the fact that a QR code looks like a neutral image and hides what it will do. You cannot tell a safe code from a dangerous one by looking at it.

Remember that you never need to scan a code to receive a payment. Only scan codes you generated yourself or that come from a trusted source in person. Before opening any code, use a tool such as an AVO QR Scanner to preview where it leads, and read the destination carefully.

Review your linked devices regularly. In WhatsApp, open the linked devices section in settings and remove any device you do not recognize. This takes less than a minute and can stop a hijacker who has quietly gained access.

Scam 13: Video Call Blackmail and Sextortion

The last scam is one of the most distressing. It often begins with a friendly or flirtatious message from a stranger, followed by an invitation to a video call. During the call, the scammer may show a pre-recorded clip or try to convince you to expose yourself.

The scammer secretly records the call and then threatens to share the footage with your family, friends, or colleagues unless you pay. Some versions use edited images instead of anything real, relying on fear alone. The threats are often accompanied by deadlines and by screenshots of your contact list.

If this happens, the most important thing to know is that you are the victim of a crime, and you are not alone. Paying rarely ends the problem, because the scammer usually demands more. Do not send money, and do not delete the evidence.

Stop all communication, block the account, and take screenshots of the messages, numbers, and any payment requests. Report the incident to the platform and to your local police or cybercrime authority. Many countries have dedicated reporting portals and helplines for sextortion.

Young people are frequent targets, so it helps to talk about this risk openly with teenagers. Features like AVO Parental Controls can help parents manage which apps a child's device can use and set limits, but the most important protection is a child who knows they can tell a parent without fear of punishment. If a young person is being blackmailed, reassure them first and handle the practical steps together.

Red Flags That Appear in Almost Every WhatsApp Scam

Looking back at the thirteen scams, you may have noticed that they share a few features. Learning to spot these patterns is more useful than memorizing every variation, because scammers keep changing the details.

Urgency is the most common sign. Messages demand that you act immediately, before a deadline or consequence. Scammers know that time pressure prevents careful thinking.

Requests for money or codes come next. Whether it is a transfer, gift cards, a deposit, a fee, or a verification code, the end goal is almost always to get something valuable out of you. Any unexpected request of this kind deserves suspicion.

Unknown numbers claiming to be someone familiar are another giveaway. Check the number, and verify through another channel. Remember that names and photos can be copied.

Secrecy and isolation are warning signs as well. Scammers tell you not to talk to family, your bank, or the police. Genuine problems can be discussed openly.

Too-good-to-be-true offers appear in jobs, prizes, investments, and shopping. If something promises large rewards for minimal effort, it is a trap.

Poor language, odd links, and a change of channel also help identify scams, although they are less reliable now that scammers use better tools. Pressure to move the conversation to another app is a common move. The safest approach is a pause: stop, think, and verify before acting.

WhatsApp Settings That Make You Harder to Scam

WhatsApp includes several built-in protections. Spending ten minutes setting them up can block many of the scams above. None of them requires technical skill.

Turn on two-step verification in the account settings. This adds a PIN that is required when your number is registered on a new device, and it prevents account takeover through a stolen code. Add a recovery email so that you can reset the PIN if you forget it, and keep that email account secure.

Adjust privacy settings to limit who can see your profile photo, "about" text, and last seen. Restrict who can add you to groups to "My contacts," which stops strangers from placing you in investment or job scam groups. Fewer public details mean less material for impersonators.

Use the option to silence unknown callers. This sends calls from numbers not in your contacts straight to a quiet list, which reduces exposure to fake official calls and blackmail video calls. You can still review them later if you wish.

Check linked devices regularly and log out any you do not recognize. If you have ever scanned a QR code for someone else, review this list at once. It is a quick way to spot account hijacking.

Use block and report when you receive suspicious messages. Reporting helps WhatsApp detect patterns, and blocking prevents further contact. Do not feel rude about ignoring or blocking strangers.

Be careful with forwarded messages. WhatsApp labels messages that have been forwarded many times, and those labels are a useful warning. Do not forward unverified claims, giveaways, or urgent alerts.

Finally, keep the app and your phone's operating system up to date. Updates fix security weaknesses that attackers try to exploit. Enable automatic updates through the official store.

How AVO Security Can Help

Careful habits do most of the protective work, but the right tools can add useful layers, especially for the technical side of these scams. AVO Security offers a set of features that map onto several of the risks covered above. It is worth being clear about what such tools can and cannot do.

They cannot read your encrypted WhatsApp conversations, and they cannot stop a persuasive stranger from convincing you to do something. The decision to share a code or send money is still yours. What they can do is check the links, codes, networks, and devices around the conversation.

Link Checker is relevant for scams that depend on a web address, such as fake prizes, delivery notices, and fake WhatsApp warnings. Pasting a suspicious URL into the tool shows whether it is associated with known phishing or malware, which gives you a moment to pause. It works best on addresses that have already been reported, so very new scam pages may not be flagged.

QR Scanner helps with the QR tricks described earlier, by showing and checking the destination before you open it. That extra step is valuable when someone urges you to scan a code quickly. Web Shield adds browser-level protection that aims to block known harmful pages if a click slips through.

Smart Scan is useful if you suspect you installed a modified app or clicked a malicious link. It looks over your device for risky apps and outdated software, so you can clean up instead of guessing. Email Breach Scan checks whether your email address appears in known leaks, which matters because your recovery email protects your WhatsApp account.

VPN and Wifi Security address the network side. A VPN encrypts your traffic on public networks, and Wifi Security helps evaluate a connection for weak encryption, which reduces the chance of someone interfering with your online activity while you are out. Neither protects against being tricked, but both reduce other risks.

For families, Parental Controls offer a way to filter content and manage devices used by children, who are common targets for job offers, gaming giveaways, and blackmail attempts. Used together with honest conversation, they can lower the chance that a young person stumbles into a scam. As with any tool, they are a supplement to good habits, not a replacement.

What to Do If You Have Been Scammed

Even careful people get caught, so a clear recovery plan matters. Acting quickly can limit the damage, and there is no reason for embarrassment. Scam networks are organized and well practiced.

If your WhatsApp account was taken over, try to re-register it with your phone number and enter the new verification code. If you have two-step verification, you will need your PIN. Then log out of any linked devices, enable two-step verification, and warn your contacts that messages from your number were fraudulent.

If you cannot regain access, contact WhatsApp support through its official help channels. Meanwhile, tell friends and family through another app or by phone not to respond to requests from your number. The faster you spread the warning, the fewer people lose money.

If you sent money, contact your bank or payment provider immediately. Ask whether the transaction can be stopped, reversed, or flagged. The sooner you report, the better your chances, although recovery is never guaranteed.

If you shared passwords or card details, change the passwords right away, starting with your email, and enable two-factor authentication. Contact your card issuer to block or replace the card. Check your accounts for unfamiliar activity over the following weeks.

If you installed something suspicious, remove it and run a security scan. If you suspect serious compromise, consider resetting the device to factory settings after backing up important data. Change your passwords from a clean device.

Finally, report the scam. Use WhatsApp's report function, and notify your local cybercrime authority or consumer protection agency. Reports help investigators identify patterns, and they can protect others. Keep screenshots and transaction records, since they may be needed later.

Conclusion

WhatsApp scams succeed by exploiting trust, urgency, and routine, not by out-hacking encryption. Whether the message is a fake code request, a "Hi Mum" text, a job offer, a prize, or a QR code, the pattern is the same: someone wants you to act before you think. Slowing down is your strongest defense.

The practical takeaway is to never share verification codes, verify any money request through another channel, and treat unexpected links, codes, and offers as suspect until proven otherwise. Turn on two-step verification, tighten your privacy settings, and review linked devices. Tools from providers such as AVO Security can add useful checks around links, codes, devices, and networks, but your own pause before you tap, scan, or send remains the step that stops most scams.