Your group chat is not safe because the message came from your friend’s number. Someone gets into a WhatsApp account, then starts borrowing trust like it is an emergency fund, sending out “please send me R500” messages before the real owner even notices the door is open.
In the wrong hands, WhatsApp becomes a disguise. The face stays familiar, the tone sounds normal enough, and the request arrives with just enough panic to make you move fast. By the time anyone compares notes, money has gone, the account owner is locked out, and half the family is arguing over who should have called first.
How the takeover starts
The entry point is usually human. Many of these scams begin with phishing, a bait message built to make you hand over the keys yourself. Sometimes the message pretends to be from WhatsApp. Sometimes it sounds like a friend, a cousin, or a person begging for help. Sometimes it is dressed up as a competition, a verification request, or some innocent-looking link that is anything but.
SIM-swap fraud is a nastier route. In this version, criminals trick a mobile network into moving your number onto a SIM card they control. Once that happens, they can receive the SMS code WhatsApp sends for login. They do not need your phone in their hand; they only need your number and enough personal detail to impersonate you convincingly.
Leaked passwords also help them. If you reuse login details across apps and one service gets breached, those credentials can be tested against other accounts linked to your email or phone number. Add social engineering, malicious QR codes, fake attachments, and a bit of nerve, and the whole thing becomes a very efficient disaster.
The message your friends get
Once they are inside, scammers usually do not waste time. They send out urgent messages that sound like they come from you, which is the whole point. The script is almost always the same, just with different props.
Maybe you are stranded and need money for transport. Perhaps there is a hospital bill. Maybe a car has broken down. Perhaps your phone is “acting up” and you need someone to send a code on your behalf. Some even ask for a “temporary” transfer, as if fraud becomes respectable when it promises to pay you back tomorrow.
If the account belongs to someone who does freelance work or runs a business, the angle changes. Now there is an invoice, an urgent supplier payment, or a client refund that needs to go out immediately. If the scammer has access to old chats, they may even copy the victim’s usual slang, emojis, and voice-note style. Many people only catch on after the second or third message.
The red flags people ignore
The first clue is often boring, which is why it gets missed. If you receive a WhatsApp verification code you never asked for, someone else is trying to register your number. If you suddenly get logged out, that is not a quirky app glitch, it is a takeover attempt. If a friend’s profile picture, name, or status changes in a way that feels off, pay attention.
Linked Devices is another place where people get lazy. WhatsApp shows every browser or desktop session tied to your account. Unfamiliar devices should not be sitting there quietly. If one appears and you do not recognise it, log it out immediately.
There is also the classic, painful tell: someone you know sends a message that sounds just a little too rushed, too vague, or too unlike them. The request lands with money involved, or with a code, or with a link that needs opening now. That is usually the scammer pushing for speed before the target remembers how their friend actually texts.
What to do before you become the next story
The strongest defence is annoyingly simple. Turn on two-step verification in WhatsApp and set a PIN you do not use anywhere else. Add an email address to the account so you have a recovery route if you forget that PIN. If passkeys are available on your device, use them. They are a cleaner login method than relying on SMS alone.
Then stop sharing verification codes. WhatsApp will not ask for them. Your sister will not need one from you. Your cousin, your boss, your best friend and the random person pretending to be support do not need that six-digit code either.
Check Linked Devices regularly, ideally once a week. If there is a session you do not recognise, remove it. Be suspicious of links, attachments and QR codes even when they arrive from a familiar contact, because the familiar contact may already be compromised.
If the scam already hit your circle
If a friend’s account looks hijacked, call them on their actual number or reach them another way. Do not have the argument in WhatsApp. Do not reply to the suspicious chat as if the criminal will suddenly grow a conscience. Warn mutual friends fast, then report the account inside WhatsApp.
If money has already moved, call your bank’s fraud line immediately. Give the amount, the time, the recipient details and anything else you have. After that, report the matter to SAPS and keep screenshots of the chat and the transfer. If your own account was taken over, tell your contacts straight away, change other passwords tied to your email and banking, then re-register WhatsApp on your phone.
The scam works because it weaponises trust. Your best protection is not paranoia, it is friction: a PIN, a recovery email, a quick check of linked devices, and the habit of calling your people before you send money to a message that arrived wearing their name.
