How to spot a WhatsApp scam before it costs you money

The short answer: most WhatsApp scams need one of three things from you: a code, a payment or a click. If a message pushes you to share a code, send money urgently or open a strange link, stop and check first.

Why WhatsApp scams work

Scammers don’t need to hack your phone. They rely on pressure, urgency and trust. A message looks like it comes from a friend, a bank, a job recruiter or a “lucky” giveaway, and it asks you to act now, before you have time to think.

The 5 most common WhatsApp scams

1. “Please send me the code I sent to you by mistake”

Someone, often using a friend’s hacked account, says a 6-digit code was sent to your number by mistake. That code is your WhatsApp login code. If you share it, they take over your account and message all your contacts.

Rule: never share a WhatsApp verification code with anyone, not even a friend.

2. The friend or family member who urgently needs money

“Hi, it’s me. My phone is spoilt, I’m using a new number. Please send ₦50,000, I’ll refund you tonight.” The story is always urgent and the account number is never theirs.

What to do: call the person on the number you already have, or ask a question only they would know.

3. Fake job offers

“Earn daily from home by liking videos” or “You’ve been shortlisted, pay a small registration fee.” Real employers don’t charge you to apply or to start work.

4. Investment and “double your money” groups

You’re added to a group full of people celebrating big profits. Many of those “members” are fake accounts. Any offer that guarantees high returns quickly is a red flag.

5. Fake giveaways and links

“Click here to claim your free data / free gift from [big brand].” These links steal your details or ask for payment.

Warning signs to watch for

• Urgency: “Do it now or you’ll lose it.”
• Secrecy: “Don’t tell anyone about this.”
• Payment first: fees, “activation” or “processing” charges.
• A new number claiming to be someone you know.
• Links to sites that don’t match the real company’s website.
• Spelling mistakes and “too good to be true” promises.

Protect your account in 2 minutes

Turn on two-step verification. It adds a 6-digit PIN that’s needed whenever your number is registered on a new phone, so a stolen code alone isn’t enough.

1. Open WhatsApp and go to Settings.
2. Tap Account, then Two-step verification.
3. Tap Turn on (or Enable) and create a 6-digit PIN.
4. Add an email address so you can recover the PIN if you forget it.

If you’ve been targeted

1. Don’t send any more money, and stop replying.
2. Call your bank immediately if you’ve paid or shared card details. Ask them to block the transaction or your card.
3. Report and block the account inside WhatsApp.
4. Warn your contacts if your account was taken over.
5. Keep screenshots of the messages and payment details, and report to the police.

Where to go next

Got a question about a message you received? Send it to Ask Mr. Tom on WhatsApp. We may cover it in a future Daily Brief scam alert.