started · updated
WhatsApp scams: Authorities warn of zero-click attacks and extortion
Law enforcement agencies in Spain, Italy, and Macau are warning of sophisticated new WhatsApp scams targeting users through identity theft and extortion.
One major method involves ‘zero-click’ attacks, particularly affecting Apple devices running outdated iOS versions. These attacks allow criminals to compromise accounts without any user interaction. Once inside, scammers can coexist with the legitimate user, sending fraudulent messages to contacts—often requesting urgent money transfers of approximately €1,000—without the victim noticing the activity on their own device.
Another prevalent tactic involves the use of WhatsApp’s ‘view once’ photo feature. Scammers send a single-use image from an unknown number, often containing sensitive or explicit content. After the recipient opens it, the attacker claims it was sent by mistake and uses social engineering to extort money by threatening legal action or social exposure.
Additionally, some criminals use fake business accounts to send fraudulent security alerts, claiming a user’s account is ‘high-risk’ to trick them into visiting phishing sites and revealing verification codes. Authorities recommend keeping all operating systems and apps updated, enabling two-step verification, and never opening files from unknown senders.
Entities
Apple · Guardia Civil · Meta · Policía Nacional · Polizia di Stato · WhatsApp
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] Scammers are using fake business accounts to send fraudulent security alerts to WhatsApp users. borncity.com · macaudailytimes.com.mo
- [● 2 SOURCES] Clicking a ‘START’ button on fake security sites directs users to enter codes that allow scammers to hijack accounts. borncity.com · macaudailytimes.com.mo
- [○ 1 SOURCE] A new wave of zero-click attacks is targeting WhatsApp users. www.ispazio.net
- [○ 1 SOURCE] Compromised accounts can be used to impersonate contacts and request emergency funds. www.ispazio.net
- [○ 1 SOURCE] Zero-click attacks specifically target Apple devices running outdated versions of iOS and WhatsApp. www.ispazio.net
- [● 2 SOURCES] Fraudulent messages claim accounts are ‘high-risk’ to pressure users into verifying their profiles. borncity.com · macaudailytimes.com.mo