How do scammers take over a WhatsApp account?

Scammers send a message with a link to a fake vote. When the user opens the link and enters requested information like a PIN or scans a QR code, they hand over control of their account.

What do scammers do with a stolen account?

From the stolen account, they send messages to the victim's contacts, falsely requesting urgent money (e.g., for a dental procedure) and provide a bank account number for payment.

How can I verify if a request for money is real?

If a friend or family member asks for money via WhatsApp, call them using a regular phone call to verify it's really them.

What are the basic measures to protect a WhatsApp account?

Enable two-factor authentication in settings, regularly check the list of linked devices, and never enter your PIN or scan QR codes from suspicious messages.

Croatia

Don't Fall for This Message: Scammers Are Taking Over Your Account

B.G. · Prije 2h | 3 min

Rostock Police Warn of Rise in WhatsApp Scams. An Apparently Innocent Request to Vote Could Cost You Control of Your Account and Your Money.

Summary

Rostock Police warn of a rise in scams where fraudsters take over users' accounts via WhatsApp messages asking for votes.
In one case, a 65-year-old lost his account, and scammers sent fake requests for money for dental treatment to his contacts.
Scammers are very convincing in communication, declining calls with excuses like recovering from surgery, leading many to believe the story.
For protection, it is recommended to enable two-factor authentication, regularly check linked devices, and verify any money requests by phone.

A simple message asking for support for someone's niece or participation in an online survey can serve as a trap for a serious scam. Scammers use it to take control of WhatsApp accounts in just a few minutes, then attempt to extort money from the victim's contacts, warns the Rostock Police Department.

According to Fenix magazine, which shared the warning, in one case financial payments were already made after criminals exploited a stolen account. The message typically reads: "Can you quickly vote for my niece?" and comes from an account of someone the recipient knows, which further lowers their guard.

One Click to Full Control

The Rostock Police Department is seeing an increase in such scams. After the user opens the link from the message, they are asked to confirm their identity, scan a QR code, or enter a PIN. By sharing this information, the victim unknowingly hands over full control of their WhatsApp account.

In a specific case in the Rostock district, a 65-year-old man received such a message from a known person. After following the instructions, his account was quickly taken over by scammers. They then sent messages to his acquaintances claiming they urgently needed money for a dental procedure and provided a bank account number for the transfer.

Convincing Communication and False Excuses

Although the man immediately informed his acquaintances that it was a scam, some still transferred money. The police emphasize that this form of fraud is extremely risky because the perpetrators communicate very convincingly with people from the circle of the person whose profile they have taken over. They give logical answers to follow-up questions and decline phone calls with reasons such as recovering from surgery or the effects of anesthesia.

Because of such behavior, many believe they are actually talking to a friend or family member, which makes it easier for scammers to access money.

How to Protect Yourself?

Experts recommend several simple measures that can reduce the likelihood of such scams. First and foremost, enable two-factor authentication in WhatsApp settings and regularly check the "Linked Devices" section to remove any unknown logins.

Never enter your PIN or scan QR codes that come through suspicious links. If a friend or family member asks for money via WhatsApp, call them directly by phone to verify it's really them. The police warn that a message coming from a known WhatsApp number does not necessarily mean it was sent by the owner of that account.