The Judiciary Police (PJ) warned in a statement yesterday that scammers are using WhatsApp Business accounts to send fraudulent messages designed to steal users’ accounts.
The messages falsely claim that users have logged in through different IP networks frequently or that their accounts have been flagged as high risk, the statement said, urging recipients to click a “START” button to verify their accounts, with scammers claiming that the accounts will be automatically logged out if verification is not completed within a specified period.
After clicking the button, users are redirected to a fake “WhatsApp Security Detection Centre” website, which provides an eight-digit code and instructs users to enter it in WhatsApp on their phones, the statement underlined, adding that entering the code allows scammers to log into the account elsewhere and subsequently use it to defraud the victim’s contacts or for other illicit purposes.
The police noted that the latest tactic uses WhatsApp Business’s button function instead of the phishing links commonly seen in previous scams, making it easier for users to fall victim.
The PJ Anti-Fraud Coordination Centre reminded the public that WhatsApp will not ask users to click unknown buttons or links due to security risks or claim that their accounts will be logged out, the statement said, adding that users should verify official WhatsApp accounts by looking for the blue verification badge, and never scan unknown QR codes or enter verification codes at another person’s request.
Users should also independently verify any financial requests supposedly made by friends or relatives.
This infographic provided by the Judiciary Police (PJ) yesterday shows how scammers are using upgraded techniques to hack WhatsApp accounts, urging users to avoid interacting with suspicious “Start” buttons. Translation from Chinese arranged by the Post.
