Don’t Get Caught! The Top 10 WhatsApp Scams To Watch For In 2026

Essentials to know

• WhatsApp-style impersonation scams surged during COVID-19 – and UK fraud reporting shows scams and payment fraud continue to rise, with criminals constantly adapting their tactics.
• Common approaches include everything from “friend in need” messages to fake jobs, romance/investment pitches, and phishing links, fraudsters use urgency and emotional pressure to push you into fast decisions.
• Many scams aim to steal money, personal details, or hijack your WhatsApp account by tricking you into sharing a verification code – and some attempt call-forwarding or “settings change” tricks to intercept codes.
• Never share one-time codes or bank details, and be suspicious of unexpected links, QR codes, invoice/payment-change requests, or “too-good-to-be-true” offers – QR-code (“quishing”) fraud is a growing UK risk.
• Use two-factor authentication (2SV), train staff, and consider a dedicated WhatsApp Business number to separate personal and professional use – then report incidents to Action Fraud (and contact your bank immediately if money’s been sent).

How are you protecting yourself against WhatsApp scams? It’s tempting to believe you won’t fall for one – but modern scams are designed to catch you when you’re busy, stressed, or juggling customers.

Most schemes start on WhatsApp Messenger, but as more UK companies turn to <ahref=”https://www.yourbusinessnumber.com/blog/what-is-whatsapp-business”>WhatsApp Business for quotes, bookings, deliveries and customer support, scammers are increasingly trying their luck with small businesses and their teams.

So how can you make sure you don’t fall victim? Read on to discover the top WhatsApp scams to watch out for in 2026, how they work, and what you can do to keep your information (and your money) safe.

How common are WhatsApp scams?

During the COVID-19 lockdowns, reports of WhatsApp scams soared by more than 2000%, according to Lloyds Bank.

And fraud pressure hasn’t disappeared – UK Finance reported £629.3m stolen in the first half of 2025 across payment fraud and scams, showing just how persistent and profitable these crimes are.

Just one scam – the WhatsApp “friend in need” impersonation – cost UK victims over £1.5m in 2022, according to the City of London Police.

The most common scams to watch out for on WhatsApp in 2026

This isn’t an exhaustive list – scammers are always testing new angles – but these are the most common WhatsApp scams UK small businesses (and their staff) should know how to spot.

1. The ‘friend or family member in need’ scam

Nothing tugs at the heartstrings like a plea for help from a loved one – and criminals exploit that emotional connection for their own gain.

The conversation often begins “Hi Mum” or “Hi Dad” and claims the family member has lost their phone and is messaging from a new number (to explain why it’s unfamiliar).

They’ll then ask for money for something “urgent” – a bill, a replacement phone, or an emergency – and provide bank details. Sometimes they claim they can’t access their usual banking app to justify the payment going to a different account.

What you can do: Don’t reply in the same thread. Call your family member using a trusted number you already have saved, or check with someone else close to them. Consider agreeing a simple family “password” for genuine emergencies, so you can quickly verify it’s really them.

2. Job offer scams

Recruiters do sometimes use WhatsApp to <ahref=”https://www.yourbusinessnumber.com/blog/case-study-recruit-top-talent-with-whatsapp-business”>get in touch with potential new hires – but unsolicited messages offering unrealistic salaries, “easy remote work”, or vague “tasks” are often scams.

They may push you to click a link, share personal information, or pay a fee for “training” or “processing”. For business owners, similar tactics show up as fake applications or fake supplier outreach designed to steal identity details or divert payments.

What you can do: Treat unexpected recruitment messages with caution. Verify the company independently (not via links in the chat), and never pay fees to progress an application. If anything feels off, block and report the number.

3. Romance scams

Romance scams begin on dating apps before shifting to WhatsApp, where the conversation can feel more private and “real”. Once trust is built, the scammer asks for money, gift cards, travel help – or steers the victim into a “sure thing” investment, often crypto.

These stories can be extremely convincing and increasingly AI-assisted. (That’s right, it’s really not Brad Pitt, folks…)

What you can do: Reverse image search profile photos, cross-check details on other platforms, and be wary if money enters the conversation. For investment pitches, verify firms using the FCA’s tools – including its newer Firm Checker – before you send a penny.

4. Call forwarding scams

These attacks attempt to take over your WhatsApp account by intercepting verification codes – sometimes by manipulating call settings. WhatsApp is end-to-end encrypted, so scammers usually can’t read old chats – but if they can register your number on a new device, they can impersonate you and target your contacts.

A common trick is to pressure you into dialling star (*) or hash (#) codes (MMI/USSD-style commands) that can change call handling or forwarding.

What you can do: Don’t follow instructions from unknown callers – especially requests to dial codes or change settings. If in doubt, hang up and verify the request via an official channel.

5. Lottery scams

Scammers message claiming you’ve won a large prize, then ask for personal details (passport/driving licence photos) or demand a “fee” to release the winnings.

They’ll often rush you to respond quickly and tell you to keep it secret – legitimate lotteries don’t operate like that.

What you can do: Ignore and report “you’ve won” messages. If you entered a real draw, verify it via the organisation’s official website (typed in manually), not via WhatsApp links.

6. QR code scams

QR scams (often called “quishing”) use QR codes to hide phishing links. For example, a scammer might send a QR code for “payment”, “verification”, or a “refund”. Scanning it can lead to a fake website that steals login details or card data.

Action Fraud warned that nearly £3.5 million was lost to quishing in reports made between April 2024 and April 2025, and the NCSC explains why QR codes can be risky in real-world settings (NCSC).

What you can do: Treat QR codes like unknown links. Only scan codes you were expecting and can verify (and watch for stickers placed over real codes on posters, parking machines or menus).

7. WhatsApp Gold scams

The “WhatsApp Gold” scam has been around for years. Fraudsters invite you to “upgrade” to a premium version that doesn’t exist. Clicking can install malware or take you to a fake login page.

Some versions use scare tactics (“don’t open this video!”) and encourage you to forward the message to contacts like a chain letter.

What you can do: Don’t forward scare messages. Delete “upgrade” invitations immediately and don’t download anything linked from unsolicited chats.

8. Fake giveaways and surveys

Scammers impersonate trusted brands and send “survey” links promising gift cards or prizes. In reality, the form is designed to steal personal data – and sometimes payment details.

What you can do: Don’t click links in unexpected “giveaway” messages. If it’s a brand you recognise, go to the official site/app directly to check whether a promotion is real.

9. WhatsApp verification code scams

<ahref=”https://www.yourbusinessnumber.com/blog/how-to-verify-and-create-a-whatsapp-business-account-virtual-number”>Verifying your WhatsApp Business account is quick, easy and secure – as long as you keep your verification code private.

This scam typically starts with you receiving a code you didn’t request. Then a scammer messages saying they “sent it by mistake” and asks you to forward it. If you do, they can register your account on their device and lock you out. Action Fraud and consumer groups regularly warn about this pattern (Action Fraud; Which?).

What you can do: Never share your verification code – with anyone. If a code arrives unexpectedly, assume someone is trying to take over your account and secure it immediately.

10. WhatsApp tech support scams

Scammers pose as “WhatsApp support” (or “Meta support”) claiming there’s a problem with your account. They’ll pressure you to act fast and ask for verification codes, personal information, or payment.

Be cautious with “verified” visuals: scammers may add a fake tick to a profile photo. A genuine verification badge appears next to the name (not inside an image).

What you can do: Treat unsolicited “support” messages as suspicious. WhatsApp won’t ask for your codes. Block and report the contact if you receive a request like this.

How can I stay safe on WhatsApp?

Follow these top tips to keep your WhatsApp Business account secure:

• Stop and think before responding – urgency is a common scam tactic (the UK’s Take Five campaign is built around this)
• Question unusual requests for money, gift cards, or “urgent” transfers – especially if bank details have “changed”
• Set up a ‘password’ with family and key staff, so you can confirm identity quickly
• Verify identity via a known method (call a saved number), not by replying in the same WhatsApp thread
• Turn on two-factor authentication / 2-step verification on key accounts (NCSC guidance)

Always block suspicious contacts, report them in WhatsApp, and report fraud to Action Fraud. If you’ve transferred money, contact your bank immediately – speed matters.

Is WhatsApp Business secure?

WhatsApp protects messages with end-to-end encryption, but most “WhatsApp scams” don’t break encryption – they trick real people into handing over money, codes, or access. That’s why the best protection is practical: clear staff rules, careful verification, and strong account security (like 2-step verification).

Help keep your communications sane and easy to manage with a virtual number for WhatsApp to help separate your work and personal life. A dedicated WhatsApp Business number or business eSIM not only stops business calls from intruding into private time, but also helps you avoid scams – after all, why would your mum be calling your business number when she has your personal one?