Fake Support Scams on WhatsApp
How fraudsters impersonate bank support, WhatsApp itself, and tech companies on WhatsApp to steal account credentials and financial information.
Part of: Fake Tech Support Calls
Last reviewed: 1 June 2026
WhatsApp is increasingly used to deliver tech-support fraud: scammers send messages impersonating the WhatsApp support team, your bank's fraud department, or tech companies, with urgent warnings about account security. Because the messages arrive in your WhatsApp inbox, they carry the implicit credibility of a personal communication.
WhatsApp account takeover is a specific variant: scammers convince users to share a six-digit verification code that allows the attacker to register the victim's number on a new device, taking over the account and potentially accessing financial services linked to it.
How this scam works on WhatsApp
A message claiming to be from 'WhatsApp Support' warns that your account will be deactivated unless you verify by forwarding a code you are about to receive by SMS. That SMS is a WhatsApp registration code. Forwarding it gives the attacker full access to your WhatsApp account, which they then use to message your contacts requesting money under an emergency pretext.
Bank support variants involve messages claiming unusual transactions were detected on your account and requesting you call a number or click a link to verify. The link leads to a fake banking portal that harvests your credentials. Because WhatsApp is end-to-end encrypted, even sophisticated users can be caught off guard by the personal-message format.
Common red flags
- WhatsApp message from 'WhatsApp Support' asking you to forward or share a code
- Urgent account-security warning delivered via WhatsApp message asking you to verify credentials
- A contact you know sending an unusual money request — their account may be taken over
- Bank 'fraud alert' delivered via WhatsApp message with a link to verify
- WhatsApp sender number starting with an unexpected country code claiming to be a domestic bank
How to protect yourself
- Enable two-step verification in WhatsApp Settings > Account > Two-step verification
- Never share a WhatsApp registration code with anyone — WhatsApp will never ask for it
- Verify any money request from a WhatsApp contact by calling them on a known number
- Report and block any WhatsApp number impersonating support by forwarding to 0800 046 8000 (WhatsApp UK) or using the in-app report feature
- Treat any bank communication via WhatsApp with the same scepticism as an unsolicited call
How to report it
- Report the WhatsApp account using the in-app feature: open chat > name at top > Report
- If your account was taken over, recover it through WhatsApp's account recovery process and report to Action Fraud (UK) or IC3 (US)
- Report banking credential phishing to your bank's fraud line immediately
Frequently asked questions
I got a WhatsApp message claiming to be from WhatsApp support asking for a verification code — should I share it?
No — never share a WhatsApp verification code with anyone, including someone claiming to be WhatsApp support, since that code is exactly what an attacker needs to take over your account. WhatsApp does not contact users via chat to request this code; if you receive an unexpected code, someone is likely trying to hijack your account, not verify it.
A message claiming to be my bank's support on WhatsApp is asking me to confirm my account details — is this legitimate?
Banks generally don't initiate support conversations over WhatsApp asking you to confirm sensitive account details or passwords — treat this as a phishing attempt and don't reply with any information. Contact your bank directly through the number on your card or their official app to verify whether there's a genuine issue.
How do I report a fake support account impersonating a company on WhatsApp?
Use WhatsApp's in-app "report" and "block" function on the contact, which sends the report to WhatsApp for review and can lead to the number being banned. If you've shared sensitive information or lost money, also report the incident to your bank and to your local cybercrime reporting agency.
What should I do if my WhatsApp account is taken over?
Re-register your WhatsApp number immediately by entering your phone number in the app and requesting a new verification code via SMS. This will log out the attacker. Enable two-step verification immediately after regaining access, and warn your contacts that your account was compromised.