Over the past few days, a new WhatsApp scam has begun to worry many users in Spain. The National Cybersecurity Institute (INCIBE) has received numerous inquiries through its Cybersecurity Helpline about an account theft technique on the popular messaging app that is causing real headaches for victims. Learn more about other scams on the platform.
This method has spread rapidly due to its simplicity and effectiveness, leading to identity theft and requests for money from victims' contacts. If you use WhatsApp, it's important to be aware of how the scam works to avoid falling into the trap.
How do scammers steal WhatsApp accounts?
The scheme begins when a user receives an unexpected video call seemingly from a trusted contact . However, during the call, only a black screen appears. The caller, pretending to be an acquaintance, asks the victim to share their phone screen to try to resolve the supposed display problem.
At that moment, the victim usually receives an SMS with the WhatsApp verification code , which is inadvertently displayed during screen sharing. The cybercriminal takes advantage of this moment to note down the code and subsequently hijacks the account , preventing the legitimate owner from accessing their chats.
After the theft, the criminal begins sending messages to the victim's contacts simulating urgent situations, such as the need for Bizum transfers or the request for other codes received by SMS, spreading the scam and increasing the damage.
Steps to try to recover your WhatsApp account
INCIBE 's first recommendation is to immediately inform all contacts to prevent them from becoming indirect victims of the fraud. It is also advisable to notify the original contact who initiated the video call, as their account has likely been compromised as well.
- Try reinstall WhatsApp on your mobile to force the sending of a new verification code, which may require waiting a few hours depending on the message that appears on the screen.
- contact him technical support from WhatsApp by writing to the email [email protected].
- If this does not resolve the issue, contact the Delegate of Data Protection of WhatsApp.
- After a month without any effective response, report to the Spanish Data Protection Agency to assert your rights as a user.
- Gather all possible information and evidence and file a formal complaint before the National Police or Civil Guard, since it is a identity impersonation.
This process can be laborious and time-consuming, but following the proper steps is essential to regaining control of your account and stopping the spread of the scam among contacts.
Keys to protect yourself and avoid becoming a victim of this scam
INCIBE insists on several security measures to minimize risks:
- Activate XNUMX-Step Verification from WhatsApp settings. This adds an extra layer of security, as even if an attacker obtains the verification code, they'll also need an additional PIN to gain control of the account.
- Don't share your screen through messaging apps unless you are absolutely sure who you are talking to.
- Never provide codes Do not send SMS codes or forward them, even if they are requested by supposedly known people. These codes are completely personal and should only be used by the account owner.
- If you detect that a friend has been scammed, it is advisable that you suggest that he or she call the 017 (cybersecurity helpline), save all information, report it to the authorities, and contact the bank if any fraudulent activity has occurred.
The role of 017: attention and assistance in cybersecurity
The telephone number 017 is the channel that INCIBE provides to all citizens to ask questions or receive advice on digital incidents. This line operates every day of the year, from 8:00 a.m. to 23:00 p.m. , is free and confidential, and can be used by both individuals and companies.
Thanks to this service, the affected person can receive updated information, recommendations, and support throughout the WhatsApp account recovery process.
The rise in online scams makes it essential to take extra precautions when using apps like WhatsApp. Understanding the methods cybercriminals use and implementing security measures, such as two-step verification , helps keep your personal information safe. Acting quickly, informing your contacts, and following the steps recommended by authorities can make all the difference in stopping the damage, regaining control, and preventing future incidents.
