TL;DR: Most WhatsApp scams follow a few scripts: an impersonated relative, a fake job or investment group, a file that installs malware, or a request for your six-digit code. Report money lost to your national fraud body, such as the FTC in the US. Turn on two-step verification and never share a code. In India, the cybercrime portal and the 1930 helpline take reports. Free tool: Scan My Shadow's digital footprint checker at scanmyshadow.com/digital-footprint-checker.

👉 Use the free digital footprint checker — 30 seconds →

WhatsApp messages are end-to-end encrypted, but that does nothing to stop a stranger from messaging you. Scammers use it because it is free, widely used in India, and feels personal. Here are the seven patterns we see most often.

Seven common WhatsApp scams

  1. Impersonation. A new number claims to be a relative or boss and asks for urgent money. See the "Guess Who" scam.
  2. Verification code theft. Someone asks you to "forward" a code that just arrived by SMS. That code lets them register your number on their phone.
  3. Fake APK and file scams. A file posing as a government scheme, bank KYC update or challan installs malware. See the 8th Pay Commission APK scam.
  4. Task and job scams. Small payouts for liking or rating things, then a "deposit" for bigger tasks that never pays out.
  5. Investment groups. You are added to a group full of fake profit screenshots, then pushed to a fake app. Our investment scam playbook shows how the pitch works.
  6. Linked-device hijack. A scammer gets you to approve a QR code or link that adds their phone or browser to your account.
  7. Fake customer care. A number found through search or a forwarded message pretends to be a bank or courier and asks for card details or a remote-access app.

Red flags

Lock down your account

Regulators are watching too; see why India halted the WhatsApp username rollout over scam fears.

If you already fell for it

Stop replying and do not pay any "release" fee. If money moved, contact your bank immediately and report to the FTC (US), Action Fraud (UK), the Canadian Anti-Fraud Centre or Scamwatch (Australia). In India, call 1930 and file at the cybercrime portal; our golden hour explainer shows why speed matters, and the complaint filing guide covers the steps. Report and block the number inside WhatsApp. If your account was taken over, follow recovering a hacked WhatsApp account. For more scam types, see the Indian scam field guide.

FAQs

How do I know if a WhatsApp message is a scam?

Be suspicious of any message from an unknown number that creates urgency, asks for money, a code or a file install, or offers easy earnings. Check by calling the real person or company on a number you already trust.

Can someone hack my WhatsApp with just my phone number?

Not with the number alone. The usual routes are tricking you into sharing the six-digit registration code, getting you to link their device, or installing malware. Two-step verification makes it much harder for someone to register your number even if a code leaks.

How do I report a WhatsApp scammer?

Open the chat, tap the contact name, then Report and Block. Then report to your national fraud body, such as ReportFraud.ftc.gov in the US or Action Fraud in the UK. In India, also file at cybercrime.gov.in, call 1930 if money was lost, and flag the number through Chakshu on the Sanchar Saathi portal.

Is there a list of WhatsApp scammer numbers I can check?

No official public list exists. Third-party lists are incomplete and scammers change numbers often, so judge the behaviour of the message rather than the number alone.

Before scammers use your details, see them first: check what is already public about you.

Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.

Sources

Related Reading