WhatsApp users warned of ‘Ghost Pairing’ account takeover scam

Police authorities in Germany and Austria are warning users about a new WhatsApp fraud scheme known as ‘Ghost Pairing’. Criminals exploit the trust of victims by using hacked accounts of friends, family members, or colleagues to send seemingly harmless messages.

In a typical scenario, the scammer asks the victim to vote for someone in a contest, such as a child winning a dance course or a scholarship. The victim is prompted to click a link and then scan a QR code or enter a code via the ‘Linked Devices’ function. This action allows the attacker to secretly link the victim's WhatsApp account to their own device, granting them full access to read, delete, or send messages.

Once access is gained, criminals often use the hijacked account to make fraudulent financial demands. Experts and the Federal Office for Information Security (BSI) advise users to never click on suspicious links, to be cautious with QR codes, and to regularly check the ‘Linked Devices’ section in their WhatsApp settings to ensure no unauthorized devices are connected.