Data Broker Exposure Scams on WhatsApp
WhatsApp messages claim to have found personal data about the recipient on broker sites and offer paid removal services or use the manufactured fear to harvest further personal information.
Part of: Data Broker Exposure Scams
Last reviewed: 1 June 2026
The shift of many scam operations to WhatsApp has brought data broker exposure scams to messaging inboxes. Receiving a message claiming to contain your personal details — possibly including your home address or family member names — in a private messaging channel feels more targeted and threatening than the same content on a website, amplifying the fear response that the scam relies on.
The WhatsApp context also removes the browser cues that an experienced user might use to identify a fraudulent website, making it harder to assess legitimacy of the claim.
How this scam works on WhatsApp
A WhatsApp message arrives from an unknown number claiming to be a data privacy service or security researcher who discovered the recipient's personal information on a data broker site. The message includes some accurate-seeming details — possibly the recipient's name, city, or a partial phone number — to establish credibility.
The sender offers to remove the data for a fee or provides a link to a removal service website that requests extensive personal verification — which collects even more data than the broker originally held. Some messages pivot to a secondary scam after establishing rapport: once the recipient is engaged, the sender introduces an investment opportunity or requests payment for a full privacy audit.
Numbers used for these attacks are often harvested from WhatsApp groups or purchased from data brokers themselves — meaning the fraudster already has some real data on the target that can be deployed to appear credible.
Common red flags
- WhatsApp message from an unknown number claiming to have found your personal details on a data broker site
- Message that includes your name, address, or partial phone number to establish apparent legitimacy
- Offer to remove your data for an upfront fee
- Link to a removal service that requests your government ID or full address to process removal
- Message escalating from data privacy concern to an investment or financial opportunity
- Sender claiming to be a data privacy professional or 'ethical hacker' without any verifiable credentials
How to protect yourself
- Treat all unsolicited WhatsApp messages from unknown numbers with maximum scepticism regardless of how much they appear to know about you
- Submit opt-out requests directly to data broker sites rather than through any intermediary who contacts you unsolicited
- Never provide additional personal information in response to a message claiming your data is already exposed
- Block and report the sender using WhatsApp's in-app block and report function
- Review WhatsApp's privacy settings to limit who can add you to groups or see your profile information
- Use a reputable data broker removal service that you identify independently — not one that contacts you first
How to report it
- Report and block the number in WhatsApp using the in-app function in the chat settings
- Forward the message to your national consumer protection or data privacy authority
- File a complaint with your national fraud authority if payment was made for a fraudulent service
Frequently asked questions
Should I be concerned if a stranger messages me with some of my real personal details?
The presence of real data is unsettling but should not cause you to comply with requests. Fraudsters acquire partial data from legitimate broker sites specifically to appear credible. Accurate knowledge of your city or name does not mean the sender is legitimate or that their claimed service can help you.