Police warn of fraudulent websites targeting WhatsApp users
Singapore’s police have issued a warning regarding a new phishing scam that targets users attempting to log into WhatsApp Web. Fraudulent websites are tricking victims into authorising access to their WhatsApp accounts, compromising their security.
Victims, searching for the official WhatsApp Web page online, clicked on links that appeared genuine but led to phishing websites containing a legitimate QR code from WhatsApp’s official site. When victims scanned the QR code with their mobile phones, the phishing page became unresponsive, allowing scammers to remotely access their WhatsApp accounts.
Once compromised, the scammers used the victims’ accounts to message their contacts, asking for personal information, Internet banking credentials, or even money transfers. Victims only realised their accounts had been breached when they were alerted by contacts about suspicious requests for funds or sensitive details.
The police recommend that users ensure they are accessing the official WhatsApp Web at https://web.whatsapp.com, use the WhatsApp Desktop App, and enable two-step verification. Additionally, users should regularly check linked devices and avoid sharing verification codes.
