Fake Support Scams on WhatsApp
How fraudsters impersonate bank support, WhatsApp itself, and tech companies on WhatsApp to steal account credentials and financial information.
Part of: Fake Tech Support Calls
Last reviewed: 1 June 2026
WhatsApp is increasingly used to deliver tech-support fraud: scammers send messages impersonating the WhatsApp support team, your bank's fraud department, or tech companies, with urgent warnings about account security. Because the messages arrive in your WhatsApp inbox, they carry the implicit credibility of a personal communication.
WhatsApp account takeover is a specific variant: scammers convince users to share a six-digit verification code that allows the attacker to register the victim's number on a new device, taking over the account and potentially accessing financial services linked to it.
How this scam works on WhatsApp
A message claiming to be from 'WhatsApp Support' warns that your account will be deactivated unless you verify by forwarding a code you are about to receive by SMS. That SMS is a WhatsApp registration code. Forwarding it gives the attacker full access to your WhatsApp account, which they then use to message your contacts requesting money under an emergency pretext.
Bank support variants involve messages claiming unusual transactions were detected on your account and requesting you call a number or click a link to verify. The link leads to a fake banking portal that harvests your credentials. Because WhatsApp is end-to-end encrypted, even sophisticated users can be caught off guard by the personal-message format.
Common red flags
- WhatsApp message from 'WhatsApp Support' asking you to forward or share a code
- Urgent account-security warning delivered via WhatsApp message asking you to verify credentials
- A contact you know sending an unusual money request — their account may be taken over
- Bank 'fraud alert' delivered via WhatsApp message with a link to verify
- WhatsApp sender number starting with an unexpected country code claiming to be a domestic bank
How to protect yourself
- Enable two-step verification in WhatsApp Settings > Account > Two-step verification
- Never share a WhatsApp registration code with anyone — WhatsApp will never ask for it
- Verify any money request from a WhatsApp contact by calling them on a known number
- Report and block any WhatsApp number impersonating support by forwarding to 0800 046 8000 (WhatsApp UK) or using the in-app report feature
- Treat any bank communication via WhatsApp with the same scepticism as an unsolicited call
How to report it
- Report the WhatsApp account using the in-app feature: open chat > name at top > Report
- If your account was taken over, recover it through WhatsApp's account recovery process and report to Action Fraud (UK) or IC3 (US)
- Report banking credential phishing to your bank's fraud line immediately
Frequently asked questions
What should I do if my WhatsApp account is taken over?
Re-register your WhatsApp number immediately by entering your phone number in the app and requesting a new verification code via SMS. This will log out the attacker. Enable two-step verification immediately after regaining access, and warn your contacts that your account was compromised.