São Paulo’s Procon has warned about a new fraud scheme exploiting WhatsApp users. Criminosos get in touch pretending to be employees of purchasing platforms and request a six-digit code to supposedly activate advertisements. In fact, this code is the application’s verification key, allowing scammers to completely clone the victim’s account. Após gain access, fraudsters send messages to all contacts asking for money in the compromised user’s name.
Como works the cloning scam
The scheme begins when the criminal poses as a representative of a sales website and contacts the victim. The scammer then asks the person to enter a six-number code, claiming it is necessary to activate an ad on the platform. Esse code is actually WhatsApp security check. With this number in hand, the fraudster can access the account and completely clone it, assuming the identity of the legitimate user.
Após successful cloning, the criminal starts sending messages to all of the victim’s contacts. In most cases, the scammer requests money by simulating a personal or family emergency. Como messages appear to come from a known person, many contacts end up falling for the scam and transferring amounts.
Consequências financial and security
Segundo Guilherme Farid, chief of staff at Procon-SP, WhatsApp scams can involve two main types of fraud. The first occurs when fraudulent links redirect consumers to fake supplier pages, where they end up purchasing products that will never be delivered. The second type is precisely account cloning, which results in extortion to regain access to the application.
Financial loss is the most immediate consequence for victims. Além Furthermore, after gaining access to the account, the scammer forwards fraudulent links to all saved contacts, significantly expanding the number of potential victims and creating a fraud network.
Proteção and preventive measures
- Nunca provide personal data, passwords or verification codes to anyone.
- Não trust offers of help, sweepstakes or promises of money sent via WhatsApp, social media or email.
- Não clicks suspicious links or shares information whose origin you are unsure of.
- Baixe apps only from official stores such as Google Play or App Store.
- Utilize antivirus updated on computer, tablet and smartphone.
Ativando two-step verification
Procon-SP recommends that all users enable “2-Step Verification” on WhatsApp as an additional protective measure. Para To activate this functionality, the user must access the application settings, click on “account” and then on “two-step verification”. Esse feature adds an extra layer of security by requiring an additional password to access the account on new devices.
Fernando Capez, secretary of consumer protection, warned that scams on the internet and social networks have increased significantly during the covid-19 pandemic. Ele emphasizes that consumers should always be suspicious, pay extra attention and never provide passwords or number sequences to third parties, regardless of who they claim to be.
What to do if you are a victim
Caso has been a victim of this type of scam, the person should contact official WhatsApp support via email support@whatsapp.com and request temporary account deactivation. It is important to act quickly to prevent the criminal from causing further damage using the cloned account. Procon-SP also advises that consumers contact the institution through official channels, remembering that the agency never requests personal information via WhatsApp or sends messages through the application.