Profile Cloning Impersonation Scams on WhatsApp
Fraudsters copy someone's WhatsApp profile name and photo to create an account on a different number, then contact the victim's friends and family as if they are the real person.
Part of: Profile Cloning & Impersonation Scams
Last reviewed: 1 June 2026
WhatsApp profile cloning operates differently from social media cloning because WhatsApp accounts are tied to phone numbers — meaning a cloner cannot take over the original number but can register a new number with the same display name and profile photo. This is enough to deceive contacts who see the familiar name and picture before checking the number.
The attack is particularly effective in family and close social groups where members may not have all contacts saved or may not check the phone number behind a familiar-looking message.
How this scam works on WhatsApp
A scammer registers a WhatsApp account using a different phone number but copies the target's profile photo and display name. They then contact people from the target's social circle — phone numbers obtained through social media profiles, data breaches, or contact lists leaked through previous compromises.
The message typically describes an emergency requiring urgent financial help and asks the recipient not to call the normal number because the phone is lost, broken, or unavailable. This blocks the most effective verification step and keeps the conversation within the fake WhatsApp account.
In group variants, the cloned account is added to a group the real person belongs to — sometimes possible if group privacy settings allow anyone to add members — where it uses the familiar name and photo to spread the same scam message to everyone in the group simultaneously.
Common red flags
- Message from a contact whose name and photo you recognise but from an unfamiliar or saved number
- Explanation for why the real phone is unavailable that discourages direct calling
- Request for urgent money transfer to a new account number or mobile payment handle
- Unusual phrasing or grammar inconsistent with the real person's normal communication style
- Group message from an apparently familiar contact requesting money or personal details
- Person contacting you about a problem on WhatsApp while simultaneously active on other platforms
How to protect yourself
- Save contacts with their full name so you notice when a familiar-sounding message arrives from an unknown number
- Call the real person on their saved number before responding to any financial request received via WhatsApp
- Enable WhatsApp two-step verification so your own account requires a PIN for re-registration
- Set your WhatsApp profile photo visibility to 'My contacts' only, limiting its availability for cloning
- Warn groups immediately if you discover a clone of your account or a friend's account
- Report the cloned number to WhatsApp using the in-app report function
How to report it
- Open the cloned account's chat and use the in-app 'Report' function to flag the number to WhatsApp
- Contact your mobile operator if the scammer appears to be using a number ported from your original number
- Report to your national fraud authority if financial transfers were made to the cloned account
Frequently asked questions
The cloned number contacting my family said their phone was broken — how do we verify them another way?
Try reaching the real person through a completely different channel, such as email, a workplace number, or a mutual contact who can check in person, rather than trusting any explanation for why the usual phone can't be used. A story specifically designed to block verification is itself a red flag.
Can WhatsApp tell me if someone else has registered an account using my name and photo?
WhatsApp doesn't proactively notify you of clones using your public name and photo on a different number, since it isn't your own account being compromised — you'll typically find out from a contact who received a suspicious message. Periodically ask close contacts if they've received anything unusual 'from you' as an informal check.
Is there a way to stop someone from adding a clone of me to a group I'm already in?
If the group's privacy settings allow anyone to add members, any member could add an impersonating number, so ask the group admin to restrict who can add new members to admins only. This closes one route scammers use to reach group members directly.
How do I protect my profile photo from being used in a WhatsApp clone?
Go to WhatsApp Settings > Privacy > Profile Photo and set it to 'My contacts' or 'Nobody'. This prevents people who do not have your number saved from seeing or copying your photo, removing one of the two key elements a cloner needs — though the display name remains copyable by anyone.