Why is WhatsApp a Target for Hackers?

WhatsApp is one of the most widely used messaging platforms in South Africa, with 93.9% of social media users on it. Its popularity and the sensitive information it holds—personal messages, contacts, and financial data—make it an attractive target for cybercriminals. Hackers exploit its user base to steal personal information, commit fraud, or carry out scams using hijacked accounts.

How can you protect yourself?

WhatsApp Gold Hoax
The WhatsApp Gold hoax is circulating again, claiming to offer "premium features" like video chats or deleting sent messages. It tricks users into clicking a link that installs malware, compromising your device and personal data. Stay safe by avoiding suspicious links and downloading apps only from official sources.

Fake WhatsApp Support Accounts
Hackers create fake profiles posing as WhatsApp support, complete with realistic profile images and messages. They send you links or request your one-time password (OTP) or two-step verification code—something WhatsApp will never do. If you share these details, they can take over your account entirely.
To avoid this, never share your OTP or verification code with anyone, even if they appear to represent WhatsApp.

Unexpected OTP Requests
You may receive a six-digit WhatsApp security code that you didn’t request. Scammers use this code to attempt logging into your account. Often, they send you a message from a hijacked account of a friend or family member, asking for the code and pretending it’s urgent. Once they access your account, they can impersonate you, ask your contacts for money, and even remain in your group chats to gather sensitive information. To avoid this, ignore unexpected OTPs and verify unusual requests directly with the person who contacted you through a different channel.

Call Forwarding Exploits
Hackers pretending to be your service provider may ask you to use USSD codes to forward your calls. This redirects your incoming calls to their phone. When WhatsApp sends an OTP, the hacker receives it and gains access to your account.
To avoid this, never use USSD codes you don’t fully understand and avoid forwarding calls unless you are certain of the purpose.

Malicious Tools and Apps
Hackers may send you unofficial, fake links to access WhatsApp. They then export chat histories or deploy spy apps to access your private data. To avoid this, only download WhatsApp from trusted sources like the Google Play Store or Apple App Store and avoid sharing sensitive information via unknown apps.

How to Protect Accounts with Two-Step Verification?

Two-step verification adds an essential layer of security by requiring a PIN alongside the OTP. Here’s how to set it up:
• Open WhatsApp and go to Settings > Account > Two-step verification.
• Enable it and set a memorable, complex PIN.
• Add an email address as a backup for account recovery.
This ensures that even if hackers access your OTP, they cannot take over your account without the PIN.
Besides the two-step verification, users are encouraged to enable app lock.
• Use the fingerprint or face recognition lock feature within WhatsApp (Settings > Privacy > Fingerprint lock) or on your phone to ensure that no one can access WhatsApp even if they have physical access to your device.

What Are the Steps to Recover a Compromised Account?

If your account is hijacked, follow these steps immediately:
• Reinstall WhatsApp: Download the app and re-register your account using your phone number.
• Complete Verification: Enter the new OTP sent to your device.
• Enable Two-Step Verification: Add extra protection to prevent future hacks.
• Report the Hack: Contact WhatsApp’s Help Centre and alert them about the compromised account and ask your friends and family to do the same.
• Notify Your Contacts: Let friends and family know your account was hacked to prevent them from falling victim.
• Check Linked Devices: Review and remove any unfamiliar devices under Settings > Linked Devices.
• Secure Your Phone Number: Contact your mobile service provider to protect your SIM against further misuse.

How do you Spot and Report Suspicious Activity?

Red flags indicating a potential hijack include:
• Receiving an unexpected OTP you didn’t request.
• Being logged out of WhatsApp without initiating it.
• Friends reporting unusual messages sent from your account.
• Changes to your profile settings or details you didn’t make.

If you notice any of these signs:

1. Report suspicious activity to WhatsApp through the in-app Help Centre.
2. Ask your contacts to report your account as compromised.
3. Avoid clicking on unknown links or responding to unusual requests.
Regularly check for updates, use two-step verification, and always download WhatsApp from trusted sources to reduce the risk of hacking.

How do I report fraudulent activity

Please contact MTN immediately if you suspect that you’ve been a victim of fraud.
Call 083 123 HELP/083 123 4357 or, email fraudhelp@mtn.com You’ll receive a reference number to confirm that the fraud report has been logged. If you’re on a contract, you’ll need to provide a certified copy of your ID to verify your case details.“Prevention is better than cure”, so #LearnMore so that you can #DoMore to arm yourself against all fraud tactics by accessing the Fraud Awareness Playbook on the MTN website.