Profile Cloning Impersonation Scams on WhatsApp
Fraudsters copy someone's WhatsApp profile name and photo to create an account on a different number, then contact the victim's friends and family as if they are the real person.
Part of: Profile Cloning & Impersonation Scams
Last reviewed: 1 June 2026
WhatsApp profile cloning operates differently from social media cloning because WhatsApp accounts are tied to phone numbers — meaning a cloner cannot take over the original number but can register a new number with the same display name and profile photo. This is enough to deceive contacts who see the familiar name and picture before checking the number.
The attack is particularly effective in family and close social groups where members may not have all contacts saved or may not check the phone number behind a familiar-looking message.
How this scam works on WhatsApp
A scammer registers a WhatsApp account using a different phone number but copies the target's profile photo and display name. They then contact people from the target's social circle — phone numbers obtained through social media profiles, data breaches, or contact lists leaked through previous compromises.
The message typically describes an emergency requiring urgent financial help and asks the recipient not to call the normal number because the phone is lost, broken, or unavailable. This blocks the most effective verification step and keeps the conversation within the fake WhatsApp account.
In group variants, the cloned account is added to a group the real person belongs to — sometimes possible if group privacy settings allow anyone to add members — where it uses the familiar name and photo to spread the same scam message to everyone in the group simultaneously.
Common red flags
- Message from a contact whose name and photo you recognise but from an unfamiliar or saved number
- Explanation for why the real phone is unavailable that discourages direct calling
- Request for urgent money transfer to a new account number or mobile payment handle
- Unusual phrasing or grammar inconsistent with the real person's normal communication style
- Group message from an apparently familiar contact requesting money or personal details
- Person contacting you about a problem on WhatsApp while simultaneously active on other platforms
How to protect yourself
- Save contacts with their full name so you notice when a familiar-sounding message arrives from an unknown number
- Call the real person on their saved number before responding to any financial request received via WhatsApp
- Enable WhatsApp two-step verification so your own account requires a PIN for re-registration
- Set your WhatsApp profile photo visibility to 'My contacts' only, limiting its availability for cloning
- Warn groups immediately if you discover a clone of your account or a friend's account
- Report the cloned number to WhatsApp using the in-app report function
How to report it
- Open the cloned account's chat and use the in-app 'Report' function to flag the number to WhatsApp
- Contact your mobile operator if the scammer appears to be using a number ported from your original number
- Report to your national fraud authority if financial transfers were made to the cloned account
Frequently asked questions
How do I protect my profile photo from being used in a WhatsApp clone?
Go to WhatsApp Settings > Privacy > Profile Photo and set it to 'My contacts' or 'Nobody'. This prevents people who do not have your number saved from seeing or copying your photo, removing one of the two key elements a cloner needs — though the display name remains copyable by anyone.