Fake Software Update Scams on WhatsApp
Fraudsters send WhatsApp messages urging you to install an app or 'update' via a link, delivering malware or hijacking your account under the guise of a patch.
Part of: Fake Software Update Scams
Last reviewed: 1 June 2026
On WhatsApp a fake update prompt borrows the trust of a familiar chat. A message claiming you must update the app to keep using it, or install a 'new feature', can spread between contacts and feel routine — especially when it appears to come from someone you know.
Genuine app updates come through the official app store, never through a WhatsApp link. Scammers exploit the update habit and the rapid sharing between contacts to push malware or to trick users into steps that hand over their account.
How this scam works on WhatsApp
The message warns that your WhatsApp or another app is outdated and will stop working unless you install an 'update' via the supplied link, or it promises an exclusive new feature available only through a download.
The link leads to a malicious app or a page that, under the pretext of 'verifying' the update, asks for a code that actually lets the scammer take over your account. Once compromised, the account is used to spread the same scam to your contacts.
Arriving from a trusted chat, often via a hacked contact, the prompt is designed to be installed before the victim questions it.
Common red flags
- A WhatsApp message says the app is outdated and must be updated via a link
- You are promised an exclusive feature available only through a download
- The 'update' link points outside the official app store
- You are asked to share a verification code to 'complete the update'
- The message arrives from a contact whose account may be hacked
- You are pressured to act before the app 'stops working'
How to protect yourself
- Update WhatsApp and other apps only through the official app store
- Never install an 'update' from a link sent in a chat
- Never share a verification code with anyone, for any reason
- Verify with a contact separately if an update prompt seems to come from them
- Enable two-step verification on your messaging account
- Block and report the number within WhatsApp
How to report it
- Report the contact using WhatsApp's in-app reporting feature
- Report a malicious app to the official app store where relevant
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
I shared a verification code because a 'WhatsApp update' message asked me to — what should I do?
Act quickly — open WhatsApp and check if you're still logged in; if you've lost access, use the app's official account recovery process and consider re-registering your number to regain control. Enable two-step verification once back in, and warn your contacts that your account may have sent scam messages while compromised.
Why do these fake update scams specifically target messaging apps like WhatsApp?
Taking over a messaging account gives scammers immediate access to a real contact list they can target with the same trusted-sender advantage, making the scam self-propagating. This is why protecting your verification code and enabling two-step verification are particularly important.
How do I know WhatsApp is genuinely up to date on my phone?
Check your phone's official app store listing for WhatsApp, which shows whether an update is available and lets you install it directly from there. WhatsApp does not distribute updates through links sent within chats.
Does WhatsApp ever send an update link in a chat?
No. App updates come only through the official app store. Any chat message linking to an 'update' or asking for a verification code is a scam aimed at installing malware or hijacking your account. Never share a code.